Planting C4: Cross-Compatible External C2 for Your Implants
Scott Taylor introduces C4, an open-source framework decoupling payload implants from command-and-control protocols using versatile external connectors.
Summary
Architectural Bottlenecks in Modern C2 Frameworks
Scott Taylor analyzes the limitations of traditional red team implants that tightly couple execution logic to specific transport protocols, making evasion adaptation difficult during active operations.
Introducing the C4 Modular Connector Architecture
The talk introduces C4, an extensible open-source framework that separates implant execution from transport layers, enabling live protocol swapping across arbitrary channels (DNS, WebSockets, cloud storage, or social media).
Practical Demonstrations and Operator Integration
Taylor demonstrates deploying cross-platform implants with custom connectors and provides guidance on integrating C4 with existing offensive toolsets and testing defensive resilience.
Related talks
Main Stage·42 min
Wietze Beukema
Wietze Beukema presents novel DLL hijacking techniques that manipulate user-controlled environment variables to execute code via signed binaries with zero file drops.
Main Stage·52 min
Cedric Owens
Cedric Owens details modern attack paths in non-Active Directory macOS environments, including Gatekeeper bypasses, cloud IdaaS targeting, and post-exploitation tradecraft.
Main Stage·47 min
Dimitry Snezhkov
Presents advanced C2 communication obfuscation techniques that blend malicious traffic into legitimate business protocols.