Let’s Build a Simple C2 in Golang and Vue.js

Overview

Below are the lecture notes for my AntiSyphon workshop presented on April 25th 2025. Though the notes are in general more descriptive than the actual lectures, they are not expanded, meaning the content from the lectures roughly map 1:1 onto these notes. This means some shortcuts were taken as I had to ensure the entire course could fit into the allotted 4 hours.

If you’d like to do this same essential course but go into greater depth, please see the Director’s Cut here. There I have included numerous explanatory lectures reviewing essential theory prior to the practical labs, and it has multiple bonus labs which will build out more essential components. It roughly has twice the amount of content, and is imo a much more complete, rounded, and better overall educational experience.

Solutions

All the final solutions are available on GitHub here.

Part A: Introduction

• Overview of What We’ll Create
• Project Setup (Lab 00)

Part B: Server Setup

• Basic Listener, Handler, Router (Lab 01)
• Brief Introduction to Goroutines (Lab 02)

Part C: Agent Setup

• Basic Agent Setup and Config System (Lab 03)
• Agent UUID System and Server Middleware (Lab 04)

Part D: Client Setup

• Minimal Client UI Setup with Vue.js (Lab 05)
• Adding Websocket to Server (Lab 06)
• Adding Websocket to Client (Lab 07

Part E: Weaving It All Together

• Agent Command Execution (Lab 08)
• Client UI Command + Results Handling (Lab 09)
• Server Receives + Queues Commands (Lab 10)
• Agent Retrieves Command From Queue (Lab 11)
• Agent Executes, Returns Result, Server Result Processing (Lab 12)

Part F: Conclusion

• Workshop Review
• Final Thoughts