> ## Documentation Index
> Fetch the complete documentation index at: https://docs.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Merlin Command and Control Framework

> A post-exploit Command & Control (C2) tool that communicates using HTTP/1.1, HTTP/2, and HTTP/3 protocols

<img src="https://mintcdn.com/specteropsdocs/k1yx6gbUDEwWUifq/merlin-docs/logo/merlin-horizontal.png?fit=max&auto=format&n=k1yx6gbUDEwWUifq&q=85&s=c35db572ea0ffdd45583e6a0e2756800" alt="Merlin Banner" width="100%" style={{ margin: "0 auto" }} data-path="merlin-docs/logo/merlin-horizontal.png" />

HTTP/3 is the combination of HTTP/2 over the Quick UDP Internet Connections
(QUIC) protocol. This tool was the result of my work evaluating HTTP/2 in a paper titled
[Practical Approach to Detecting and Preventing Web Application Attacks over HTTP/2](https://www.sans.org/reading-room/whitepapers/protocols/practical-approach-detecting-preventing-web-application-attacks-http-2-36877/).

<Warning>
  This tool is intended to only be used during research and authorized testing.
</Warning>

<iframe src="https://asciinema.org/a/166722/iframe" width="100%" height="400" frameBorder="0" />