Agent features

Goauld agent features

The agent is the component deployed on the target machine. This section covers its features: the transports used to reach the server, the proxies and pivoting services it exposes, password handling, the killswitch failsafe, the connection sequence, and working-hours scheduling.

  • Tunneling: the transports the agent uses to reach the server, and how it falls back between them.
  • Exposed proxies: the SOCKS, HTTP, and MITM HTTP proxies exposed by the agent.
  • Relay: how an agent can relay traffic for another agent that cannot reach the server directly.
  • WireGuard: the virtual WireGuard interface used for network pivoting.
  • Password management: how the local agent password is generated, set, and disabled.
  • Killswitch: the failsafe that shuts down the agent after a set number of days.
  • Connection flow: how the control and data sockets are established and maintained.
  • Working days: scheduling network activity to specific hours and days.
  • Deployment: building, transferring, starting, and verifying an agent on a target machine.

Tunneling

Goauld agent tunneling

Exposed proxies

Goauld agent proxies

Relay

Goauld agent relaying

WireGuard

Goauld agent WireGuard

Password management

Agent password composition and management

Killswitch

Goauld agent killswitch

Connection flow

Goauld agent connection flow

Working days

Agent working days feature

Deployment

Build, start, and verify a Goauld agent