What is Covenant and what makes it stand out among C2 frameworks?
Covenant is a .NET-developed C2 framework that runs on Linux, macOS, Windows, and Docker. Its most distinctive feature is support for dynamic compilation, allowing operators to upload C# code to the C2 server, which compiles it and loads the resulting assembly into memory via Assembly.Load(). This enables highly customizable in-memory payloads for defense evasion. Read more about its specifics in [Covenant Utilization Analysis](/news/covenant-utilization-analysis).
Related article:
Covenant Utilization Analysis