Skip to content
Permalink
Browse files

Merge pull request #11 from joelsernamoreno/master

Adding Hybrid C2 Sketch
  • Loading branch information
whid-injector committed Feb 22, 2020
2 parents a54fb3d + 0b0070b commit ee4b2216aa9026017998e8223cfdb44b3118b819
@@ -0,0 +1,37 @@
# Hybrid C&C Workflow SMS & GPRS

This code allows the Hybrid C2 function in WHID Elite.

You will be able to communicate with WHID Elite via SMS and run a GPRS data exfiltration.

New commands:

* hybridC2:

* hybridC2off:

# HybridC2 configuration:

1. Open the WHID_Elite_HybridCC_v.1.0 skecth.

2. Add your web server URL in the next section of the code:

![Web Server Configuration](https://github.com/joelsernamoreno/whid-31337/blob/master/WHID_Elite_HybridC2_v.1.0/images/webserver_conf.png)

3. Compile and upload the code to WHID Elite.

**Note:** You can uncomment the following lines to debug the hybridC2 code on the serial monitor.

![Debug](https://github.com/joelsernamoreno/whid-31337/blob/master/WHID_Elite_HybridC2_v.1.0/images/debug.png)

# Use the HybridC2 function with WHID Elite

1. Send "hybridC2:" via SMS to WHID Elite to enable the hybrid function.

2. Use any exfiltration command (example: airgapnix:whoami).

3. Disable hybrid communication by sending an SMS to WHID Elite: hybridC2off:

**Demo:** https://twitter.com/JoelSernaMoreno/status/1220039697159856133

**NOTE:** In the demo, Burpsuite is used to set up a private web server. You can use other web servers. You can also use other ports for communication (TCP), but you will have to implement this with other AT commands in the WHID Elite code.

0 comments on commit ee4b221

Please sign in to comment.
You can’t perform that action at this time.