Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.
One of the features of Merlin is the ability to bypass security measures using the HTTP protocol/2. The /data/bin directory of the framework contains pre-compiled agents for Windows, Linux, macOS and PowerShell, as well as DLL libraries. By default, the address is sewn into them https://127.0.0.1:443 which you can always change to your own using the url flag, or in the case of a DLL by decompilation.
Add Review: