Dark: A Mythic C2 Agent with In-Memory BOF Execution on macOS and Linux, Part 1

Mon, 10 Aug 2026 00:00:00 +0000

Welcome, Dark.

My background was in a world where you don't share your tools. You sharpen them, you protect them, and you definitely don't put them on GitHub. We'll see how this goes :-P. This is a part 1 intro, I intend on doing more if theres an appetite for it.

Dark has been used by the ServiceNow Red Team since 2024, back when people still wrote their own agent code…before the AI slop, vibe coded agent graveyard took over GitHub. It’s been on real boxes, it has real callbacks and has been operationally proven against modern defenses. Out of the box it ships with 25 BOFs and 15 built-in commands.

Me

Mon, 10 Aug 2026 00:00:00 +0000

I do offensive security work. 20’ish years of it. The kind with customers you don’t talk about.

My GitHub is empty for a reason. This blog is new. It’s a place to drop the occasional tool or write-up when something is ready to be public. That’s it.

@fleixius

Minor Impact

Dark: A Mythic C2 Agent with In-Memory BOF Execution on macOS and Linux, Part 1

Welcome, Dark.

Me