Stentor Operator Manual
Home
  • English
  • Français
Initializing search
    • Home
    • Getting Started
    • Listeners
    • Payloads
    • Commands
    • Post-Exploitation
    • Scripting
    • API
    • Infrastructure
    • Reporting
    • OPSEC
    • Phishing
    • Home
      • Installation & Setup
      • UI Walkthrough
      • Context Menu
      • Dashboard
      • Core Concepts
      • Operator Preferences
      • Team Chat
    • Listeners
      • HTTP/HTTPS Listeners
      • DNS Listeners
      • SMB Named Pipe Listeners
      • TCP Bind Listener
      • WireGuard Transport
      • QUIC Listener
      • External C2
      • User-Defined C2 (UDC2)
      • Advanced Transport Features
      • Malleable C2 Profiles
    • Payloads
      • Payload Formats
      • Code Signing Certificates
      • Evasion Kits
    • Commands
      • File Operations
      • Process Management
      • Network Operations
      • Evasion Commands
      • Clipboard Monitor
      • Token Store
      • LDAP Browser
      • Beacon Object Files (BOF)
      • Session Management
      • Beacon Grouping
    • Post-Exploitation
      • Process Injection
      • Privilege Escalation
      • Credential Access
      • Active Directory Attacks
      • Lateral Movement
    • Scripting
      • Sleep Language Guide
      • Function Reference
      • Hooks & Events
      • Headless Mode
      • Automation
        • Playbooks
        • Webhook Notifications
    • API
      • REST API Reference
      • WebSocket Protocol
      • Multi-Server Management
    • Infrastructure
      • Relay Management
      • Target Management
      • System Profiler
      • Lab Deployment
      • Extensions
    • Reporting
      • C2 Campaigns
      • Campaign Reports
      • Artifacts
      • Audit Log
      • MITRE ATT&CK Integration
    • OPSEC
      • DNS Canary Tokens
      • OPSEC Best Practices
    • Phishing
      • Campaign Management
    Operator Documentation

    Stentor C2 Framework

    Professional red team Command & Control platform with full Cobalt Strike parity.

    Go Backend React UI Windows Implant HTTP / DNS / SMB / QUIC

    Getting Started

    Deploy core components, configure the environment, and learn the operator workflow.

    Listeners & Transports

    Configure HTTP, DNS, SMB, QUIC, and WireGuard C2 channels with malleable profiles.

    Payloads

    Generate implants in 17 formats with code signing, Garble obfuscation, and evasion kits.

    Beacon Commands

    120+ commands for file ops, process management, network pivoting, and evasion.

    Post-Exploitation

    Process injection, privilege escalation, credential access, AD attacks, and lateral movement.

    Scripting & Automation

    Sleep language scripts, hooks, events, headless mode, and playbook automation.

    API Reference

    REST endpoints, WebSocket protocol, and multi-server management.

    Infrastructure

    Relay management, target inventory, system profiler, and lab deployment.

    OPSEC

    Detection surfaces, canary tokens, posture auditing, and technique selection guidance.

    Next
    Installation & Setup
    Copyright © 2026 Stentor