c2-reverse-shell

Documentation

Overview

c2-reverse-shell — panorama 15 of the doc-truth audit.

Built strictly from the user-facing markdown:

• docs/techniques/c2/transport.md — TCP transport
• docs/techniques/c2/namedpipe.md — named-pipe listener

Tests two binding paths with clear admin/user differential candidates:

• TCP bind on a low port (≤1024 needs admin) and a high port.
• Named-pipe listener at \\.\pipe\<unique> (anyone can create a pipe in the per-process namespace; the ACL is what matters).

Each listener runs for ≤200 ms to keep the matrix turnaround fast.