Mythic Feature Descriptions

  • adjust commands: Docs - The agent can load/unload commands dynamically and report back these adjustments to Mythic to properly update Mythic's tab-complete functionality
  • alerts: Docs - The agent can report back alerts or events into the operational event log
  • artifacts: Docs - The agent reports back artifact data (ex: spawned process PIDs or files touched) available in the artifacts tab.
  • browser scripts: Docs - The agent leverages browser scripting for commands to turn text results into buttons, tables, and more.
  • credentials: Docs - The agent reports back data that is registered within Mythic's credential store
  • docker: The agent is deployable via Docker and mythic-cli
  • dynamic loading: The agent supports dynamically loading of new commands at run time
  • file browser: Docs - The agent reports back file browser data to populate the file browser on the main active callbacks page
  • file chunking: Download, Upload - The agent uses file chunking when download/uploading files.
  • interactive: Docs - The agent supports follow-on interactive tasking
  • keylogging: Docs - The agent reports back keylogging data that's available within Mythic's keylog store
  • opsec checks: Docs - The agent leverages dynamic opsec checks during task creation to potentially block non-opsec safe commands
  • p2p: Docs - The agent can link via a peer-to-peer mechanism to another agent
  • process browser: Docs - The agent can report back process information to populate the process browser on the main active callbacks page.
  • process responses: Docs - The agent does additional processing directly on the output of some tasks before registering that output with the Mythic server
  • push c2: The agent supports Push style C2
  • rpfwd: Docs - The agent supports rpfwd (reverse port forward) functionality
  • screenshots: Docs - The agent reports back screenshots that are saved in the screenshots search page
  • socks: Docs - The agent supports SOCKS functionality
  • subtasks: Docs - The agent uses subtasking to automatically issue follow-on or pre-flight commands
  • task callbacks: Docs - The agent uses task callbacks to automatically perform additional processing once a task completes
  • tokens: Docs - The agent reports back token information into Mythic's Token store and can leverage tokens as part of tasking
  • translation containers: Docs - The agent uses translation containers to add more customization to the agent's C2 messages and/or encryption
  • wrapper: The agent is a "wrapper" payload type which means it takes another agent or wrapper as input and wraps the payload into another payload type.