Merlin - HTTP/2 Command & Control server and agent

The quickest and easiest way to start using Merlin is download the pre-compiled binary files found in the Releases section. The files are compressed into 7z archives and are password protected to prevent Anti-Virus inspection when downloading. The password is merlin.

Install GO

In order to run Merlin from source, or to compile Merlin yourself, the Go programing language must be installed on the system. However, if you just want to run a pre-compiled version, you do not need to install Go.

Download and install GO: https://golang.org/doc/install

Download Merlin Server

It is recommended to download the compiled binaries from the Releases section

Ensure your GOPATH environment variable is set

Download Merlin with Go

go get github.com/Ne0nd0g/merlin

If you want to use git instead of Go, merlin must be in your GOPATH i.e. $GOPATH/src/github.com/Ne0nd0g/merlin

cd $GOPATH/src/github.com/Ne0nd0g;git clone https://github.com/Ne0nd0g/merlin/

Run Merlin Server

Merlin Server can be run as a script or compiled and run as a standalone binary file.

go run cmd/merlinserver/main.go

Merlin Server Commands

Merlin is equipped with a tab completion system that can be used to see what commands are available at any given time. Hit double tab to get a list of all available commands.

exit    Exit and close Merlin

help   Show Merlin help menu

quit    Exit and close Merlin

?      Show Merlin help menu

Agent Commands

These are the commands to control an agent from the server. Tab completion can be used to select an Agent's identifier.

agent cmd <agent id> <command>       A command to run on a remote agent

agent control <agent id> <command>  Configure/Control a remote agent (not the host)
                [kill,sleep,padding,maxretry]

agent info <agent id>               Display all information for an agent

agent list                          List agents

Github Project