Mugen無限 Mugen
/

Mugen C2 - Agents

Choose your agent

Mugen ships two agents built for different environments. Pick the one that matches your target - they share the same C2 infrastructure and operator workflow.

Demon
鬼
WindowsC + ASM

The default Windows implant. Full-featured post-exploitation toolkit targeting x64 Windows 7 and later, forked from Havoc and extended with additional evasion capabilities.

  • -Reflective DLL / EXE / Service
  • -BOF execution via CoffeeLdr
  • -.NET assembly execution
  • -Sleep obfuscation (Ekko, Zilean, Foliage)
  • -Indirect syscalls + AMSI/ETW bypass
  • -Token steal & impersonation
  • -Kerberos operations
  • -SMB named pipe + TCP pivot
View docs →
Tengu
天狗
LinuxC

A lightweight Linux implant that ships as a single ELF64 binary with zero runtime dependencies. Covers the full post-exploitation lifecycle on Linux targets.

  • -Single ELF64, no dependencies
  • -ELF BOF inline-execute
  • -memfd in-memory execution
  • -XOR sleep obfuscation
  • -Credential harvesting
  • -Keylogger (X11 / /dev/input)
  • -Persistence (cron, systemd, bash)
  • -SOCKS5 + reverse port forward
View docs →