Skip to content

Releases: its-a-feature/Mythic

v3.2.20-rc11

28 Aug 14:57
Compare
Choose a tag to compare

This is the last release of Mythic 3.2 before switching over to Mythic 3.3

v3.2.2

17 Nov 16:39
Compare
Choose a tag to compare
bug fix

v3.1.0

03 Oct 16:25
Compare
Choose a tag to compare

[3.1.0]

Changed

  • Added new build step option for skipped steps (useful if you have conditional builds)
  • Added new "Split Tasking view" as a callback dropdown option for viewing tasking
  • Updated Graphing library (react-flow)
  • Updated UI to React18
  • Can now sort by last checkin time on active callbacks page
  • New "PushC2" style available for egress C2 Profiles
    • Updated with Websocket C2 profile
    • Uses gRPC connections between C2 Docker container and Mythic
  • New TypedArray parameter type available for commands, build parameters, and c2 profile parameters
    • Useful for generic BoF/COFF style tasking where you need data and a type associated with it
    • Data passed down as an array of tuples: [ [type, value], [type, value] ]
    • PayloadType Commands need to supply a TypedArray Parsing Function to handle freeform input for typed array values
      • ex: my_bof -bof_args int:5 char*:testing wstring:"this is my string" into proper array of arrays
  • New "Host File Through C2" option available for all payloads and files via globe icon
    • Up to the C2 profile to support the RPC call from Mythic and make the file available though
    • Updated with http and websocket C2 profiles
  • Shift+Tab will cycle backwards through options on the tasking CLI
  • Event feed format changed and is now also searchable
  • "alerts" keyword in responses from agents now allow setting a source, level (info, warning, debug)
    • New send_webhook boolean field to indicate sending a custom webhook notification (even if the level isn't warning)
    • New webhook_alert dictionary field for custom data to your webhook that's not displayed to the user in the event log
    • alert string field is what's displayed to the user in the event log
  • Mythic-cli updated to allow options for setting the main UI to listen on IPv4, IPv6, or both
  • Agents can now more easily support multiple C2 profiles and have it reflected in the UI
    • Still only one instance of each c2 profile, but that will change in future releases
  • Updated callback's "update_info" and "checkin" actions so that callbacks can update their own metadata
  • New "Interactive" tasking type available to allow follow-on input in a PTY format
    • Browser view has limitations compared to a full PTY/TTY since it's still in your browser (supports ASNI colors)
      • Non-ANSI color sequence control sequences are ignored in the browser
    • Use the new supported_ui_feature SupportedUIFeatures: []string{"task_response:interactive"}, to enable this for your task in the UI
    • With MythicRPC you can open an "interactive" port with your task which you can connect to with a terminal for full PTY support
      • NOTE ALL output is still captured and stored in Mythic and viewable in the UI for the task, so be careful about long-running jobs that dump out a lot of data
      • Inputs from the Web UI will appear as "tasks" that you can search. Inputs via the opened port will not appear as tasks.
  • Your issued tasks will auto-expand, so it should reduce a click for tasks that finish immediately (help, clear, script_only)
  • File Search page updated to have Bin and Strings views available without needing to expand the dropdown
  • Updated github.com/MythicMeta/MythicContainer golang package and mythic_container PyPi packages
  • New database migrations so that you don't have to blow away the database between updates
  • Updated user login notification to be debug level (no UI popup)
  • Allow dynamic port binding with MythicRPCProxyStart
    • specify a LocalPort of 0 for Socks/Interactive ports and the next lowest available port will be used and returned
  • Allow dynamic port closing with MythicRPCProxyStop
    • specify a LocalPort of 0 for Socks/Interactive ports and Mythic will look up the port based on taskID and port type
  • Updated ProxyPorts to track "deleted" status so that they're never actually deleted and can be restarted if needed
    • Allows for a better tracking of which callbacks had/have which ports open

Mythic v3.0.0

10 May 15:06
04a8d0d
Compare
Choose a tag to compare
Merge pull request #276 from its-a-feature/v3.0.0

V3.0.0

v2.3.13

10 May 13:35
Compare
Choose a tag to compare

Final release of Mythic 2.*

v2.3.9

24 Jun 18:44
50ba9f2
Compare
Choose a tag to compare

This release wraps up a lot of UI bug fixes and some back-end server bug fixes

Version 2.3.7

31 Jan 16:57
c7a9709
Compare
Choose a tag to compare

First major release of the new user interface and Mythic 2.3 series.

Version 2.2.14

19 Jan 19:57
637cb30
Compare
Choose a tag to compare

This is the last release before moving to the new 2.3.* set of releases

Version 2.2.7

22 Jun 16:03
1da23ce
Compare
Choose a tag to compare
Merge pull request #76 from its-a-feature/2.2-updates

2.2 updates

v2.1.18

12 May 18:11
75a46ef
Compare
Choose a tag to compare

Last updates for the 2.1.* version. Next updates to the master branch will be for version 2.2