Skill

performing-red-team-with-covenant

From asi

Automates Covenant C2 red team operations via API: HTTP/HTTPS listener setup, launcher generation, grunt deployment, task execution, and lateral movement tracking. For authorized security assessments.

Python

.NET

Docker

security

npx claudepluginhub plurigrid/asi --plugin asi

Tool Access

This skill uses the workspace's default tool permissions.

Preview

Covenant is a collaborative .NET C2 framework for red teamers that provides a Swagger-documented REST API for managing listeners, launchers, grunts (agents), and tasks. This skill covers automating Covenant operations through its API for authorized red team engagements: creating HTTP/HTTPS listeners, generating binary and PowerShell launchers, deploying grunts, executing tasks on compromised ho...

SKILL.md

Similar Skills

performing-red-team-with-covenant

5.9k

Automates Covenant C2 red team ops via API: listener setup, PowerShell/binary launcher generation, grunt deployment, task execution, lateral movement tracking for authorized pentests.

3 files

cybersecurity-skills

performing-red-team-with-covenant

Automates Covenant C2 framework for authorized red team operations: authenticates to API, creates HTTP/HTTPS listeners, generates PowerShell/binary launchers, deploys Grunts, executes tasks, tracks lateral movement.

3 files

cybersecurity-skills-zh

building-red-team-c2-infrastructure-with-havoc

Deploys and configures Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations. Useful for production-grade red team infrastructure.

asi

Stats

Parent Repo Stars16

Parent Repo Forks5

Last CommitApr 4, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

Performing Red Team Operations with Covenant C2

Overview

When to Use

When conducting security assessments that involve performing red team with covenant
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Covenant C2 server deployed (Docker or .NET 6)
Python 3.9+ with requests library
Covenant API token (obtained via /api/users/login)
Written authorization for red team engagement
Isolated lab or authorized target environment

Steps

Step 1: Authenticate to Covenant API

Obtain a JWT token by posting credentials to /api/users/login endpoint.

Step 2: Create Listener

Configure an HTTP or HTTPS listener with callback URLs and bind address.

Step 3: Generate Launcher

Create a binary, PowerShell, or MSBuild launcher tied to the listener for grunt deployment.

Step 4: Deploy and Manage Grunts

Monitor grunt callbacks, execute tasks, and collect output from compromised hosts.

Step 5: Document Operations

Generate an operations report documenting all actions, timestamps, and findings.

Expected Output

JSON report with listener configuration, active grunts, executed tasks, and task output for engagement documentation.