FunnyWolf/Viper
Viper
Viper is a command and control infrastructure manager and post-exploitation framework designed for adversary attack simulation and security assessment. It functions as an orchestrator for penetration testing, combining a system for managing compromised hosts across multiple operating systems with tools for security workflow automation.
The platform is distinguished by its use of large language model agents to coordinate red team tasks, automate data processing, and provide intelligent decision support. It includes a network pivot visualizer that uses directional graphs to map relationships and lateral movement between compromised hosts.
Operational security is supported through multi-level proxy routing, connection filtering, and defense evasion tools to maintain stealth. The system also features a modular plugin architecture for custom script integration and an event-driven notification system for tracking workflow milestones.
Features
- C2 Infrastructure Managers - Provides a comprehensive system for managing the lifecycle of C2 listeners and agents with operational security.
- Agent Task Orchestrators - Orchestrates multi-step AI agent workflows to automate repetitive red team tasks and decision support.
- LLM Security Orchestrators - Coordinates penetration testing tasks and security assessments using large language model agents.
- Proxy Routing - Hides infrastructure origin by routing traffic through a chain of proxies and connection filters.
- AI-Driven Penetration Testing - Employs LLM agents to automate penetration testing tasks and provide intelligent decision support.
- Defense Evasion - Provides a suite of anti-tracing tools and firewall handlers to avoid detection during security assessments.
- Attack Simulations - Emulates real-world attacker behavior by executing post-exploitation tasks to validate security defenses.
- Operational Security Management - Implements connection filtering and multi-level proxy routing to protect C2 infrastructure and maintain operational stealth.
- Post-Exploitation Frameworks - Implements a framework for managing compromised hosts and executing payloads across multiple operating systems.
- Offensive Security Workflows - Automates sequences of offensive security tasks and notifications to maintain target environment monitoring.
- Decision Support Systems - Uses large language model agents to provide analytical insights and intelligent decision support during security operations.
- Security Data Processing - Provides AI-powered automation for processing security data and generating operational guidance during assessments.
- Lateral Movement - Maps and analyzes lateral movement and network traversal between compromised hosts.
- Pivoting Visualizations - Visualizes movements and relationships between compromised hosts to analyze network intrusion paths.
- Network Traversal Maps - Provides a directional graph visualizer to map relationships and lateral movement between compromised network hosts.
- Red Team Workflow Automations - Orchestrates repetitive penetration testing tasks and operational lifecycles for red team exercises.
- Security Operations Automation - Streamlines security assessments by automating repetitive monitoring and testing tasks through orchestration.
- Modular Plugin Architectures - Features a modular architecture that allows extending the platform via custom scripts and external plugins.
- Network Tunneling and Proxying - C2 and proxy management framework.
- Penetration Testing Frameworks - Graphical framework for modular intranet penetration and weaponization.
