A high-performance, cross-platform Remote Administration Tool (RAT) designed for modularity and stealth.
Skull Knight is an advanced C2 (Command & Control) framework built on a modern stack. It features a lightweight Go-based agent and a high-concurrency Bun-powered server. Designed for security professionals and authorized administrators, it provides a comprehensive suite of tools for remote management, monitoring, and forensic analysis.
Important
Disclaimer: This tool is for authorized educational and professional use only. Usage of Skull Knight for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
- HVNC (Hidden VNC): Access a completely hidden desktop session without the user's knowledge.
- Real-time Screen Capture: High-frame-rate streaming of remote displays.
- Remote Shell: Full terminal access across Windows, Linux, and macOS.
- File Manager: Comprehensive upload, download, and file system exploration.
- Advanced Keylogger: Real-time keystroke monitoring with offline buffering.
- Audio Capture: Remote microphone access and live streaming.
- Webcam Monitoring: Live video feed from integrated cameras.
- Process Manager: View, terminate, and monitor remote processes.
- Stealth Persistence: Multiple methods to maintain access (Registry, Task Scheduler, Startup, WMI).
- Mutual TLS (mTLS): Secure, encrypted communication between agents and the C2 server.
- SOCKS5 Proxy: Tunnel traffic through remote agents for network pivoting.
- Modular Plugin System: Extend server functionality without core modifications.
- Automated Tasks: Deploy scripts and binaries automatically upon client enrollment.
The fastest way to deploy Skull Knight is using Docker Compose.
- Deployment:
# For Linux docker compose up -d # For Windows / macOS docker compose -f docker-compose.windows.yml up -d
- Access: Navigate to
https://localhost:5173in your browser. - Authentication: Default credentials are
admin/admin(change these immediately indata/save.json).
Windows:
start-prod.batLinux / macOS:
chmod +x start-prod.sh
./start-prod.shSkull Knight features a robust build pipeline for generating custom agents.
- Build Agents: Use
build-clients.batto generate binaries for Windows, Linux, macOS, and Android. - Build Desktop Client: Use
build-desktop.batfor the Electron-based fat client. - Build HVNC DLLs: Use
build-hvnc-dll.bat(requires MSVC/MinGW).
Developed with ❤️ by benzoXdev
