🫯 Black Zinc Beacon

November 1, 2025 · View on GitHub

image

🫯 Black Zinc Beacon

A lightweight ARM beacon designed for use in Android, Raspberry Pi, and Orange Pi devices.

🫈 About

BlackZinc Beacon is a custom C2 beacon focused on ARM architecture, supporting ARM Linux environments such as Android, Raspberry Pi, and Orange Pi. It is designed for stealth, low memory footprint, and secure communications using AES-256 CFB encryption, making it ideal for offensive security operations and red team engagements.

🫪 Features

  • Cross-platform ARM support (Android, Raspberry Pi, Orange Pi)
  • AES-256 CFB encryption for secure communication
  • Customizable malleable C2 profiles
  • Lightweight, production-ready code with strict memory safety
  • Integration with curl and Bionic libc
  • No hardcoded dependencies: modular and easy to compile

🪊 Installation

make


## Usage

- Configure `C2_URL`, `CLIENT_ID`, `MALEABLE`, and other constants in `beacon.c`.
- Compile for your target ARM platform:
make

- Deploy on ARM Linux device (Android, Raspberry Pi, Orange Pi).
- Beacon will register and check for commands at regular intervals.

🪎 Security

  • Full memory safety practices (buffer overflow prevention, strict validation, snprintf usage)
  • No hardcoded secrets in production
  • Security hardened build flags recommended

🛘 Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

🌱 License

This project is licensed under the GPL-3.0 License - see the LICENSE file for details.

🫍 Code of Conduct

Please follow the code of conduct for community participation.

🎓 Educational Purpose

This project is intended to:

  • Help red teams understand modern C2 evasion techniques.
  • Assist blue teams in developing better detection logic.
  • Promote research into secure software design and defensive hardening.
  • Demonstrate the importance of runtime analysis over static signatures.

⚠️ DISCLAIMER - NO WARRANTY OR LIABILITY

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

jimeng-2025-06-29-179-Cyberpunk-style logo for 'LazyOwn RedTeam', hacking_pen-testing tool Colors_

Python Shell Script Flask License: GPL v3

ko-fi