mirror of
https://github.com/MaorSabag/NaX
synced 2026-06-28 15:01:11 +00:00
MaorSabag
c0fc8d878b
Position-independent C2 beacon for Adaptix Framework with: - PIC shellcode beacon (PEB walk, FNV1a hashing) - BeaconGate API proxy + WFSO PoC sleepmask (extensible) - BOF execution with module stomping - Malleable C2 profiles with runtime switching - WinHTTP transport (proxy-aware) - Token manipulation (steal, impersonate, create) - TCP tunneling (SOCKS, lportfwd, rportfwd) - SMB pivoting - Stardust UDRL loader with module stomping
1.9 KiB
1.9 KiB
NoNameAx (NaX) Wiki
Position-independent C2 beacon for the Adaptix Framework with module stomping, malleable C2 profiles, BOF execution, and a Stardust-pattern UDRL loader.
Pages
Core Documentation
- Beacon Architecture -- NAX_INSTANCE, bootstrap, heartbeat loop, command dispatch
- Wire Protocol -- Frame format, message types, command IDs
- Malleable C2 Profiles -- OutputConfig encoding pipeline, profile JSON format, runtime switching
- Module Stomping -- Loader-phase beacon stomping, DLL selection, LDR patching, stack unwinding
BOF System
- BOF Execution -- COFF loader, sync vs async dispatch, thread pool, media callbacks
- BOF Module Stomping -- Image-backed BOF .text, near-allocator, .pdata injection, backup/restore
Evasion
- BeaconGate & Sleepmask -- API call proxy, WFSO PoC sleepmask, extensible gate architecture
Post-Exploitation
- Token Commands -- Token theft, impersonation, credential logon, privilege listing
Networking
- Tunneling -- Local/reverse port forwarding, wire protocol, OPSEC, flow control, SMB transport support
Extending NaX
- Adding Commands -- End-to-end walkthrough: Wire.h to AxScript
- Stardust Loader Guide -- How the UDRL works, how to write your own from scratch following ZPS course material
Operations
- Build and Deploy -- Prerequisites, build commands, server plugin deployment, Adaptix setup
- Operator Reference -- All commands: navigation, file ops, recon, tokens, BOF, pivoting, tunneling, runtime config (sleep, profile, bof-stomp, sleepmask-set, sleepobf-config, chunksize, dll-notify)