Weaponizing Starlark: Non-Executable Malware and Scriptable C2 Agents

Starlark in Go

Why?

Every C2 module system ends up in the same place. You either ship native code (a BOF, a DLL, raw shellcode) and accept that it looks like malware the moment it becomes executable, or you ship a script that needs powershell.exe or python.exe on the target, which …

View comments.

more ...