URZA-C2 Framework
Project Overview
A modular command-and-control framework for red-team research: a Python C2 engine with a team server, listeners, stagers and pluggable modules, driven from a Django REST API and a Next.js dashboard. Supports multi-user, multi-server, real-time communication over WebSockets, with both GUI and CLI clients.
System Architecture
Components
URZA C2 Engine
Location: urza/ directory
The core engine responsible for handling listeners, stagers, sessions, modules, and secure communication. Manages the lifecycle of TeamServer and Client processes with extensive logging capabilities for auditing and troubleshooting operations.
Django Backend
Location: django-urza-backend/ directory
Acts as the API layer, handling user authentication, role-based access control, process orchestration (start/stop TeamServer and Client), and log retrieval endpoints for the frontend to interact with the C2 engine.
Next.js Frontend
Location: next-urza-frontend/frontend/ directory
Delivers a responsive interface enabling teamserver control, client management, and live log monitoring over the REST API with both GUI and CLI access modes.
Key Features
- 01Multi-user and multi-server support with real-time communications via WebSockets
- 02Fully modular framework where listeners, modules, stagers, and C2 channels can be customized
- 03Dynamic module evaluation via Boo scripting for implant tasks and payload execution
- 04Secure ECDHE-encrypted traffic ensuring secure communication channels
- 05Role-based access control with secure authentication via Django backend
- 06GUI/CLI interfaces for TeamServer and client management with live log monitoring
- 07Extensive logging for auditing and troubleshooting red team operations
- 08Scalable platform supporting multiple servers and clients simultaneously