Releases: wadecalvin9/ByteCode
Agent Stealth:
1. Created a Windows-specific helper:
Added a HideConsole function to the internal/windows package. This function sets the syscall.SysProcAttr{HideWindow: true} flag on Windows and does nothing on other platforms, ensuring the code remains cross-platform.
2. Updated all execution points:
Applied this helper to every location where external commands are called:
executor.go: Fixed the main execute_command handler and system info gathering (whoami).
privs.go: Fixed privilege enumeration and the powershell task handler.
network.go: Fixed netstat and arp command execution.
persist_windows.go: Fixed scheduled task creation and startup folder shortcut generation.
3. Agent Stealth:
Added logic to main.go to hide the agent's own console window on startup if it's not running in debug mode.
ByteCode C2 v1.0.0 - Initial Release
What's Included
- Go agent with Hell's Gate indirect syscalls
- Node.js + React management console
- AES-256-GCM encrypted C2 channel
- BOF loader for Cobalt Strike compatibility
- Token impersonation + ghost injection
Testing Status
- ✅ 0/63 on VirusTotal
- ✅ Undetected on Windows Defender (24H2)
- ✅ Undetected on public sandboxes