merlin-agent

No entries match these filters. Clear filters

1. v2.5.1 Oct 13, 2026 · issue 106
   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.5.1 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v2.5.1

   • New supported platform macOS (Darwin) arm64 and Linux armv7 / arm64 agent binaries
2. v2.4.0 Mar 23, 2024 · release notes

   Merlin Agent v2.4.0 adds HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. support, winhttp proxy auth, and selective build tags

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.4.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v2.4.0

   └──▷ TRY IT
   Run the agent and explicitly force the use of the winhttp API for HTTP C2 traffic
   copy

   $ ./merlin-agent -http-client winhttp

   • Adds the -http-client CLI argument to select the Go or winhttp API HTTP client
   • Introduces build tags (http, http1, http2, http3, winhttp, etc.) to selectively compile specific C2 clients
   • Enables automatic Windows HTTP proxy authentication via the winhttp API

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !When ANY build tag is included, the agent will ONLY include that feature and nothing else; e.g., using ONLY the http tag excludes SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments., TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it., and UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. clients
3. v2.3.0 Dec 26, 2023 · release notes

   Adds Mythic EKE authentication via RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. and new language code page decoders

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v2.3.0

   • Added RSA as a valid authentication method for Mythic EKE
   • Added mythic encoder to transform messages in the format Mythic expects them in
   • Support to decode Simplified Chinese (Code Page 936) encoding to UTF-8
   • Support to decode Traditional Chinese (Code Page 950) encoding to UTF-8
   • Support to decode Korean (Code Page 949) encoding to UTF-8

   5 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Removed GOGARBLE environment variable from Makefile
4. v2.2.0 Dec 14, 2023 · release notes

   Adds os/windows/pkg/text package for ShiftJIS encoding handling in v2.2.0

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.2.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v2.2.0

   └──▷ USE IT
   Handle ShiftJIS encoded text in a Go-based merlin-agent module.
   go copy

   import "github.com/Ne0nd0g/merlin-agent/os/windows/pkg/text"

5. v2.1.0 Nov 27, 2023 · release notes

   Merlin Agent v2.1.0 adds -secure flag to control JA3JA3A method for fingerprinting TLS clients by hashing fields from the ClientHello message, producing a short string that identifies the TLS library or application making a connection regardless of IP or port./Parrot TLS validation and fixes uTLS proxy/version bugs

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.1.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v2.1.0

   └──▷ TRY IT
   Disable strict TLS validation for internal servers with self-signed certs when using JA3 or Parrot transports.
   copy

   $ ./merlin-agent -transport ja3 -secure false

   • Passes TLS X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. certificate validation settings through to JA3 and Parrot clients

   1 detail in Everything

6. v2.0.0 Nov 3, 2023 · release notes

   Merlin Agent v2.0 adds peer-to-peer linking, listener commands, and configurable auth/transforms via new CLI flags

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.0.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v2.0.0

   └──▷ USE IT
   Initiate a peer-to-peer link to a remote agent over TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it..
   shell copy

   link tcp 192.168.1.72:4444

   Build the agent with AES transformation and verify TLS certificates.
   shell copy

   make windows TRANSFORMS=aes SECURE=true

   • Adds link, listener (with list, start, stop subcommands), and unlink commands to the agent for initiating and managing peer-to-peer connections.
   • Adds -listener, -addr, -auth, -transforms, and -secure CLI arguments to configure p2p methods, network interfaces, authentication, transforms, and TLS validation.
   • Adds AUTH and TRANSFORMS Make file variables to control agent build-time configuration options.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The minimum supported Go version is now 1.20; builds with earlier versions will fail.
7. v1.6.0 Nov 11, 2022 · release notes

   merlin-agent v1.6.0 adds --parrot flag for JA3JA3A method for fingerprinting TLS clients by hashing fields from the ClientHello message, producing a short string that identifies the TLS library or application making a connection regardless of IP or port. client impersonation

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.6.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v1.6.0

   └──▷ TRY IT
   Start the agent impersonating Chrome 102's TLS fingerprint.
   copy

   $ ./merlin-agent -parrot HelloChrome_102

   Switch the agent to a randomized JA3 string while it is currently active.
   copy

   $ ./merlin-agent -parrot HelloRandomized

   • Adds --parrot CLI argument to enable JA3 signature spoofing via the utls library.
   • Allows changing the --parrot parameter dynamically while the agent is running without restart.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The New() function in the agent package no longer returns an error; it only prints errors to STDOUT.
   • !Dropped support for Go versions prior to v1.19.
8. v1.5.0 Jul 22, 2022 · release notes

   Merlin Agent v1.5.0 adds SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. functionality and updates minimum Go version to 1.18.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.0 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v1.5.0

   └──▷ BREAKING ON UPGRADE

   • !The minimum supported Go version is now v1.18; upgrades from earlier versions will fail to compile or run.
   • !The Send() method on the ClientInterface interface now returns a list of messages.Base instead of a single message, requiring callers to iterate over the returned slice.
9. v1.4.1 Apr 13, 2022 · release notes

   Adds Go build tags to separate Mythic client and exposes SLEEP make target for custom interval control.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4.1 https://github.com/Ne0nd0g/merlin-agent.git
   # already have the repo? check out this version:
   $ git checkout v1.4.1

   └──▷ USE IT
   Build a Windows agent binary with a custom sleep interval of 2 minutes.
   shell copy

   make windows SLEEP=2m

   • Adds SLEEP Makefile variable (e.g., make windows SLEEP=2m) to control agent sleep interval
   • Introduces Go build tags to separate Mythic client from standalone HTTP1/2/3 client

   2 details in Everything

10. v1.4.0 Apr 2, 2022 · release notes

    Merlin v1.4 adds Windows memory command with direct syscall read/write/patch capabilities.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.4.0 https://github.com/Ne0nd0g/merlin-agent.git
    # already have the repo? check out this version:
    $ git checkout v1.4.0

    └──▷ TRY IT
    Read specific bytes from a function in a Windows module for debugging or exploitation.
    copy

    $ memory read ntdll.dll EtwEventWrite <count>

    Patch a function in memory by locating it and overwriting its bytes.
    copy

    $ memory patch kernel32.dll CreateFileW <bytes_hex>

    • Adds memory subcommand to Windows agents for reading and writing process memory via direct syscalls.
    • Adds memory read, memory write, and memory patch sub-subcommands to target specific module procedures.
    • Adds automatic AmsiScanBuffer patching in the existing load-assembly command.

    3 details in Everything

11. v1.3.1 Mar 22, 2022 · release notes

    v1.3.1 adds garble build targets to the Makefile for obfuscated agent binaries

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.3.1 https://github.com/Ne0nd0g/merlin-agent.git
    # already have the repo? check out this version:
    $ git checkout v1.3.1

    └──▷ TRY IT
    Build an obfuscated Linux agent binary using a specific seed for reproducible obfuscation.
    copy

    $ make linux-garble SEED=my_secret_seed

    Use the new user32 functions in Go code to interact with Windows session desktops.
    go copy

    import "merlin-agent/user32"
    // ... later in code:
    wStation := user32.GetProcessWindowStation()

    • Adds windows-garble, linux-garble, and darwin-garble targets to the Makefile to produce garbled agent builds.
    • Allows specifying a build seed via the SEED make variable (e.g., make windows-debug SEED=<your seed valuee>).
    • Adds GetProcessWindowStation and GetThreadDesktop functions to the user32 package.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The ClientInterface.SendMerlinMessage function is renamed to Send(), breaking any client code referencing the old name.
12. v1.3.0 Feb 17, 2022 · release notes

    Integrity level enumeration via os.GetIntegrityLevel() and HTTP post message padding for evasion

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.3.0 https://github.com/Ne0nd0g/merlin-agent.git
    # already have the repo? check out this version:
    $ git checkout v1.3.0

    • Adds os.GetIntegrityLevel() API to detect Windows integrity levels (Medium, High, System) or Linux/Unix sudo/root status
    • Introduces random message padding up to a configurable maximum for Mythic client HTTP post requests (CheckIn, Tasking, PostResponse, RSARequest, PostResponseFile)

    2 details in Everything

13. v1.2.0 Dec 13, 2021 · release notes

    v1.2.0 adds rm, ssh, runas, and token commands to merlin-agent; introduces os/windows API directory.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.2.0 https://github.com/Ne0nd0g/merlin-agent.git
    # already have the repo? check out this version:
    $ git checkout v1.2.0

    └──▷ TRY IT
    Execute a remote command over SSH within an existing session.
    copy

    $ ssh <host> <command>

    Inject custom HTTP headers when building the agent binary.
    copy

    $ make HEADERS='X-Custom: value\nAuthorization: Bearer token'

    Create a new Windows access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. to run a process under different credentials.
    copy

    $ runas <username> <password> <executable>

    • Adds rm command for native Go-based file deletion
    • Adds runas Windows command to create a process as another user with their password
    • Adds ssh command for non-interactive remote host connection and command execution
    • Adds token make, privs, rev2self, steal, and whoami subcommands for Windows Access Token interaction
    • Adds -headers CLI argument and HEADERS= Make parameter to inject arbitrary HTTP headers using newline-separated lists

    +3 more show less

    • Adds new os/windows/api directory containing OS-specific API and system calls
    • Adds new os/windows/pkg directory with wrapper functions for OS-specific calls
    • Adds commands/os package with Setup() and TearDown() functions to manage process space for Windows token operations

    8 details in Everything

14. v1.1.0 Aug 5, 2021 · release notes

    Merlin Agent v1.1.0 adds sdelete, ps, touch, netstat, kill, and env subcommands plus config URL rotation

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.1.0 https://github.com/Ne0nd0g/merlin-agent.git
    # already have the repo? check out this version:
    $ git checkout v1.1.0

    • Adds sdelete command to securely delete a file on the compromised host
    • Adds ps command to retrieve a Windows process list
    • Adds touch command to timestomp a file
    • Adds netstat command to list active network connections
    • Adds pipes command to list Windows named pipes

    +5 more show less

    • Adds env command to view, add, or remove environment variables
    • Adds uptime command to view host uptime
    • Adds ifconfig/ipconfig command to print host network adapter information
    • Adds kill command to stop or kill a running process by PID
    • Updates config structure to support comma-separated URLs for automatic agent rotation

    10 details in Everything

15. v1.0.2 Jun 25, 2021 · release notes

    Merlin agent v1.0.2 now respects HTTP_PROXY, HTTPS_PROXY & NO_PROXY environment variables for proxy configuration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0.2 https://github.com/Ne0nd0g/merlin-agent.git
    # already have the repo? check out this version:
    $ git checkout v1.0.2

    └──▷ TRY IT
    Route agent traffic through an explicit HTTP proxy by setting the HTTP_PROXY environment variable before starting the service.
    copy

    $ HTTP_PROXY=http://proxy.corp:8080 merlin-agent