Mythic Agents - SpecterOps Open Source

Overview

This documentation covers a comprehensive collection of Mythic agents designed for post-exploitation operations, system integration, and command augmentation. Mythic is a collaborative, multi-platform, red teaming framework that provides a flexible and extensible architecture for command and control operations. The agents documented here span multiple categories:

Payload Agents: Traditional post-exploitation agents running on compromised systems
Service & Integration Agents: Specialized agents for platform integration and data enrichment
Command Augmentation: Tools that extend capabilities across multiple agent types

All agents support the Mythic framework’s core features including task management, file operations, credential tracking, and comprehensive logging.

Payload Agents

Traditional post-exploitation agents that run on compromised hosts across multiple platforms.

Apollo

Author: @djhohnsteinC# agent designed for training, helping students understand attack techniques at a technical level. Supports Windows with extensive post-exploitation capabilities.

Poseidon

Author: @its_a_feature_Python-based agent supporting macOS and Linux with robust command execution, file operations, and credential harvesting capabilities.

Apfell

Author: @its_a_feature_macOS and Linux focused agent written in Python, designed for cross-platform post-exploitation with emphasis on stealth and flexibility.

Merlin

Author: @Ne0nd0gCross-platform post-exploitation agent written in Golang. Supports Windows, Linux, and macOS with advanced execution and credential manipulation features.