# ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent

> Fileless C2 agent written in pure x64 Assembly for Linux. Features stealth ICMP tunneling, memory-only execution via memfd_create, and terminal-independent daemonization.

- **URL**: https://www.freshcrate.ai/projects/ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent
- **Author**: JM00NJ
- **Category**: Frameworks
- **Latest version**: `v3.6.3` (2026-06-05)
- **License**: MIT
- **Source**: https://github.com/JM00NJ/ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent
- **Homepage**: https://netacoding.com/
- **Language**: Assembly
- **GitHub**: 24 stars, 4 forks
- **Registry**: github
- **Tags**: `assembly`, `bypassing`, `c2-framework`, `cybersecurity`, `evasion`, `fileless`, `icmp-tunnel`, `linux-kernel`

## Description

Fileless C2 agent written in pure x64 Assembly for Linux. Features stealth ICMP tunneling, memory-only execution via memfd_create, and terminal-independent daemonization.

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v3.6.3` | 2026-06-05 | High | ## Ghost-C2 v3.6.3 — "DNS Domain Rotation & Protocol Hardening"  ### DNS Module — Client (master console) - **Domain rotation**: Removed user input flow and `_translate_dns_name`   Replaced with fixed 5-entry pool: github, microsoft, cloudflare, google, windows - **Per-packet rotation**: Each command uses a different domain via `domain_idx` (BSS) - **QTYPE**: TXT `0x01001000` → A record `0x01000100` - **Encoding**: Added Base32 RFC 4648 lowercase  ### DNS Module — Agent (sniff.asm) - * |
| `v3.6.2` | 2026-04-20 | High | # 🚀 Release v3.6.2 - The Dual-Channel Phantom Update This major release transforms Ghost-C2 from a strictly ICMP-based implant into a highly evasive, Dual-Channel (ICMP + DNS) Protocol Pivoting Framework. Both the Master Console and the PIC Agent have been heavily refactored to support dynamic protocol hot-swapping without dropping the session.  ## 🌟 Key Features & Architectural Changes ### 1. Dual-Channel C2 Agent (sniff.asm) The implant has been upgraded to support seamless, real-time p |
| `v3.6.1` | 2026-04-18 | High | # v3.6.1 - The Modular Evolution (VTable & AGPLv3 Transition)  ## 📝 Release Overview This release marks a fundamental architectural shift in Ghost-C2. We have moved away from a monolithic structure to a fully Modular VTable-based Engine. This allows the implant to be protocol-agnostic, paving the way for future transport layers (DNS, HTTP, DoH) without touching the core execution logic.  CRITICAL: As of this version, Ghost-C2 has officially transitioned to the GNU AGPLv3 License to protect |
| `v3.6.0` | 2026-04-11 | High | # 👻 Ghost-C2 Update: The Hybrid Compression Revolution This update introduces the DPCM-RLE Hybrid Compressor, a high-performance engine meticulously optimized in x86-64 Assembly. With the integration of this new layer, Ghost-C2 traffic has become significantly stealthier and more efficient.  ## 🛠️ DPCM-RLE Hybrid x64 Compressor The new compression engine added to the core of the project combines two distinct data processing techniques into a single hybrid structure:  DPCM (Differential P |

## Dependency audit

- **Score**: 100/100
- **Total deps**: 0
- **Resolved**: 0
- **Unresolved**: 0
- **License conflicts**: 0
- **Warnings**: 0
- **Scanned**: 2026-05-04

## Citation

- HTML: https://www.freshcrate.ai/projects/ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent
- Markdown: https://www.freshcrate.ai/projects/ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._