Skip to content

Commit 8825914

Browse files
authored
Revise README content and update image
Updated image in README and improved clarity in several sections. Signed-off-by: Jimmy Mi <jm33-m0@users.noreply.github.com>
1 parent 2e6993f commit 8825914

1 file changed

Lines changed: 8 additions & 10 deletions

File tree

README.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020

2121
---
2222

23-
<img width="2560" height="1392" alt="image" src="https://github.com/user-attachments/assets/4ce74add-695f-4572-9a19-b6954856c73f" />
23+
<img width="2560" height="1392" alt="image" src="https://github.com/user-attachments/assets/264e7752-aef6-4451-aca6-db29b1d45f78" />
2424

2525
## What is emp3r0r?
2626

@@ -42,13 +42,13 @@ Every C2 session uses **ECDH key exchange** with **HKDF-derived session keys**.
4242

4343
### 🕸️ Peer-to-Peer (P2P) Mesh Network
4444

45-
Agents in isolated network segments **autonomously discover and tunnel through internet-connected peers** via a gossip-based (memberlist) mesh network. The mesh hop transport is **pluggable**: the default is `mtls` — camouflage mTLS 1.3 using ephemeral, malleable certificates — with `kcp` (reliable UDP) also available. All hops are further wrapped in AES-GCM end-to-end encryption.
45+
Agents in isolated network segments **autonomously discover and tunnel through internet-connected peers** via a gossip-based (memberlist) mesh network. The mesh hop transport is **pluggable**: the default is `mtls` — camouflage mTLS 1.3 using ephemeral, malleable certificates — with `kcp` (reliable UDP) also available. All hops are further wrapped in AES-GCM end-to-end encryption. **No unnecessary noise** in your C2 infrastructure: agents connect to each other instead of C2 server; **no broadcasting**; configurable bootstrap peers allowing granular control.
4646

4747
**Why this matters:** Manual pivoting requires constant operator intervention and breaks when intermediate hosts fail. emp3r0r's agents automatically form redundant communication paths, ensuring persistence through resilient peer discovery and relay.
4848

4949
### 🚪 Bring2CC: Reverse Tunneling for Isolated Targets
5050

51-
When agents **cannot** make outbound connections, **Bring2CC** reverse-proxies them back to the C2 server using SSH + KCP tunneling. This inverts the connection model: instead of the C2 reaching into the network, isolated targets are tunneled out to the C2 infrastructure.
51+
When agents **cannot make outbound connections**, `Bring2CC` reverse-proxies them back to the C2 server using SSH + KCP tunneling. This inverts the connection model: instead of the C2 reaching into the network, isolated targets are tunneled out to the C2 infrastructure.
5252

5353
**Why this matters:** Traditional C2s fail when egress filtering blocks outbound connections. Bring2CC enables access to air-gapped segments by having internet-connected hosts pull isolated targets out through reverse tunnels.
5454

@@ -90,7 +90,7 @@ curl -sSL https://raw.githubusercontent.com/jm33-m0/emp3r0r/refs/heads/v4/instal
9090
#### Initialize the Server
9191

9292
```bash
93-
emp3r0r server --c2-hosts 'your.domain.com' --port 12345 --operators 2
93+
emp3r0r server --c2-hosts 'your.domain.com' --port 12345
9494
```
9595

9696
This command deploys emp3r0r with:
@@ -145,6 +145,7 @@ generate --type linux_executable --arch amd64 --cc your.domain.com \
145145

146146
- **Adaptive tmux UI**: Native integration with dynamic status bars, adaptive layouts, and real-time agent/C2 status monitoring.
147147
- **Intelligent auto-completion** with syntax highlighting.
148+
- **Pluggable Frontend**: Develop your own frontend by replicating `operator` package features.
148149

149150
### File Transfer System
150151

@@ -161,7 +162,7 @@ generate --type linux_executable --arch amd64 --cc your.domain.com \
161162

162163
### Payload Delivery
163164

164-
- **Advanced Linux Stager**: Keeps the agent payload encrypted until execution; auto-restarts with jitter when connectivity requires.
165+
- **Advanced Linux Stager**: 2K self-contained stage0 downloader; opsec focused; keeps the agent payload encrypted until execution; auto-restarts with jitter when connectivity requires.
165166
- **Agent-Side Listener**: Deploy listeners on compromised hosts to serve payloads internally, bypassing slow C2 connections.
166167
- **Multi-stage delivery** for Linux and Windows with ELF/DLL/shellcode options.
167168

@@ -182,18 +183,15 @@ Join our [Discord server](https://discord.gg/vU98aQtk9f) for real-time discussio
182183

183184
### Resources
184185

185-
- 📸 [Screenshots and Videos](./Screenshots.md)
186-
- 📋 [Features Overview](./FEATURES.md)
187186
- 📝 [Security Policy](./SECURITY.md)
188187
- 📜 [Changelog](./CHANGELOG.md)
189188
- 📦 [Module Development (including COFF/BOF)](https://github.com/jm33-m0/emp3r0r/wiki/Modules)
190189

191190
### Troubleshooting
192191

193192
- **Connection stalls**: Verify C2 host/WireGuard settings.
194-
- **Compatibility**: Remove `~/.emp3r0r` for a clean install.
195-
196-
> **Note**: Cross-version compatibility is not guaranteed.
193+
- **Compatibility**: Remove `~/.emp3r0r` for a clean install; make sure to use the same build.
194+
- **Support**: Always use the latest release to get support.
197195

198196
---
199197

0 commit comments

Comments
 (0)