1.6-C2 icon indicating copy to clipboard operation
1.6-C2 copied to clipboard

Using the Counter Strike 1.6 RCON protocol as a C2 Channel.

1.6 C2

C2

Using Counter Strike 1.6 as a C2 for fun.

The Server is a CS 1.6 Server, the command to execute is passed as the server hostname and the agent parses commands and sends command output back via RCON.

Execute commands on the agent via the in-game console, e.g. hostname "cmd.exe /c dir C:\"

TODO

Investigate the RCON upload command for data exfiltration (https://cs1-6cfg.blogspot.com/p/cs-16-client-and-console-commands.html)