Agent features
Goauld agent features
The agent is the component deployed on the target machine. This section covers its features: the transports used to reach the server, the proxies and pivoting services it exposes, password handling, the killswitch failsafe, the connection sequence, and working-hours scheduling.
- Tunneling: the transports the agent uses to reach the server, and how it falls back between them.
- Exposed proxies: the SOCKS, HTTP, and MITM HTTP proxies exposed by the agent.
- Relay: how an agent can relay traffic for another agent that cannot reach the server directly.
- WireGuard: the virtual WireGuard interface used for network pivoting.
- Password management: how the local agent password is generated, set, and disabled.
- Killswitch: the failsafe that shuts down the agent after a set number of days.
- Connection flow: how the control and data sockets are established and maintained.
- Working days: scheduling network activity to specific hours and days.
- Deployment: building, transferring, starting, and verifying an agent on a target machine.
Agent password composition and management
Goauld agent connection flow
Agent working days feature
Build, start, and verify a Goauld agent