PT0-002 · Question #518
A penetration tester is doing an assessment for a company that requires an external command- and-control server. The command-and-control tool should be able to use multiple types of payloads…
The correct answer is B. Covenant. Covenant is a .NET command-and-control framework specifically designed for red teams, offering a web-based interface for managing compromised systems and supporting diverse payloads.
Question
A penetration tester is doing an assessment for a company that requires an external command- and-control server. The command-and-control tool should be able to use multiple types of payloads (PowerShell, SMB, and binaries) and centralize the management of compromised systems. Which of the following tools should the tester use?
Options
- ABeEF
- BCovenant
- CCensys
- DReaver
How the community answered
(50 responses)- A14% (7)
- B74% (37)
- C4% (2)
- D8% (4)
Why each option
Covenant is a .NET command-and-control framework specifically designed for red teams, offering a web-based interface for managing compromised systems and supporting diverse payloads.
BeEF (Browser Exploitation Framework) focuses primarily on web browser vulnerabilities and client-side attacks, not general command and control for system-level payloads like PowerShell or SMB.
Covenant is a modern .NET C2 framework that provides a web application for red teamers to manage compromised hosts, issue commands, and deploy various types of payloads including PowerShell, SMB, and custom binaries. Its design centralizes management and supports a wide range of operational capabilities suitable for advanced penetration tests.
Censys is a search engine for discovering internet-connected devices and services, used for reconnaissance, not for command-and-control operations.
Reaver is a tool used for brute-forcing Wi-Fi Protected Setup (WPS) PINs, not for establishing and managing command and control over compromised systems.
Concept tested: Command-and-control (C2) frameworks for red teaming
Source: https://github.com/cobbr/Covenant
Topics
Community Discussion
No community discussion yet for this question.