Stageless PHP/Python/Java/Windows with Malleable C2 profile support - #801

Merged

smcintyre-r7 merged 35 commits into

rapid7:6.5from

OJ:feature/mc2-all

Jul 7, 2026

Commits on Jul 7, 2026

First pass of python meterpreter C2 profiles

OJ
authored and
smcintyre-r7
committed
c83334b
Move towards TLV config

OJ
authored and
smcintyre-r7
committed
b332db9
First pass of C2 for java

OJ
authored and
smcintyre-r7
committed
bcb581f
Always use config block in python

OJ
authored and
smcintyre-r7
committed
e0f3b60
Update PHP to make use of TLV configuration

OJ
authored and
smcintyre-r7
committed
2ac49f0
Add UUID cookie and proxy user/pass support to python

OJ
authored and
smcintyre-r7
committed
aecfefb
Proxy, debuglog, custom headers for java

OJ
authored and
smcintyre-r7
committed
cc28515
Add debug log and proxy config to PHP

OJ
authored and
smcintyre-r7
committed
9e717dd
Multi-transport rotation & transport commands for PHP

OJ
authored and
smcintyre-r7
committed
2c0b3d2
Use TLV_TYPE_C2_UUID over URL-path in PHP/Python/Java

OJ
authored and
smcintyre-r7
committed
db2567b
Restore stageless for Android

OJ
authored and
smcintyre-r7
committed
d7971d9
Stagless entry point for java

OJ
authored and
smcintyre-r7
committed
90c664b
Fix debugging and UUID handling in python

OJ
authored and
smcintyre-r7
committed
35aee2b
Fix PHP stageless with MC2

OJ
authored and
smcintyre-r7
committed
695986c
Correctly handle encoding of in/out bound data

OJ
authored and
smcintyre-r7
committed
1f29fd8
Handle encoding correctly in windows meterp

OJ
authored and
smcintyre-r7
committed
55d1d2e
Remove trans_* defines from python extension

OJ
authored and
smcintyre-r7
committed
876374d
Correctly handle id/meta encoding in PHP

OJ
authored and
smcintyre-r7
committed
a6c162c
Python UUID encoding fixes

OJ
authored and
smcintyre-r7
committed
096c3e5
Move to STRING instead of RAW for UUID prefix/suffix

OJ
authored and
smcintyre-r7
committed
a768921
Support MC2 and stageless in java properly

OJ
authored and
smcintyre-r7
committed
ea44513
Add extension support to stageless PHP

OJ
authored and
smcintyre-r7
committed
0725b8d
Add stageless extension support to Python

OJ
authored and
smcintyre-r7
committed
4eeded1
Add extension support to stageless Java

OJ
authored and
smcintyre-r7
committed
bc06ce0
Remove debug lines from Java

OJ
authored and
smcintyre-r7
committed
c72d32b
Re-enable debug stream in java

OJ
authored and
smcintyre-r7
committed
cc62367
Set redirectErrors to true to catch erros internally

OJ
authored and
smcintyre-r7
committed
23cd419
Skip compressed types for extensions

OJ
authored and
smcintyre-r7
committed
ddd8976
Use correct getParam

OJ
authored and
smcintyre-r7
committed
595ff94
Allow restricted headers to be set in java

OJ
authored and
smcintyre-r7
committed
68407d2
Support multi-URI C2 profiles and add C2 debug logging in Python

OJ
authored and
smcintyre-r7
committed
0686ca2
Handle multiple C2 URIs in PHP payload

OJ
authored and
smcintyre-r7
committed
51735a0
Handle multiple C2 URIs in Java payload + add docker build target

OJ
authored and
smcintyre-r7
committed
ebcc62d
Handle multiple C2 URIs in Windows meterpreter

OJ
authored and
smcintyre-r7
committed
cf1e363
fix: issue with stageless reverse tcp in python

dledda-r7
authored and
smcintyre-r7
committed
b632aef

Navigation Menu

Uh oh!

Stageless PHP/Python/Java/Windows with Malleable C2 profile support - #801

Stageless PHP/Python/Java/Windows with Malleable C2 profile support#801
smcintyre-r7 merged 35 commits into
rapid7:6.5from
OJ:feature/mc2-all

Commits on Jul 7, 2026

First pass of python meterpreter C2 profiles

Move towards TLV config

First pass of C2 for java

Always use config block in python

Update PHP to make use of TLV configuration

Add UUID cookie and proxy user/pass support to python

Proxy, debuglog, custom headers for java

Add debug log and proxy config to PHP

Multi-transport rotation & transport commands for PHP

Use TLV_TYPE_C2_UUID over URL-path in PHP/Python/Java

Restore stageless for Android

Stagless entry point for java

Fix debugging and UUID handling in python

Fix PHP stageless with MC2

Correctly handle encoding of in/out bound data

Handle encoding correctly in windows meterp

Remove trans_* defines from python extension

Correctly handle id/meta encoding in PHP

Python UUID encoding fixes

Move to STRING instead of RAW for UUID prefix/suffix

Support MC2 and stageless in java properly

Add extension support to stageless PHP

Add stageless extension support to Python

Add extension support to stageless Java

Remove debug lines from Java

Re-enable debug stream in java

Set redirectErrors to true to catch erros internally

Skip compressed types for extensions

Use correct getParam

Allow restricted headers to be set in java

Support multi-URI C2 profiles and add C2 debug logging in Python

Handle multiple C2 URIs in PHP payload

Handle multiple C2 URIs in Java payload + add docker build target

Handle multiple C2 URIs in Windows meterpreter

fix: issue with stageless reverse tcp in python