Planting C4: Cross Compatible External C2 for Your Implants

Scott Taylor

DEF CON 33 · Day 1 · Main Stage

In the ever-evolving landscape of red team operations and advanced persistent threats, establishing resilient and covert command and control (C2) channels is paramount. Scott Taylor, a Red Team Member at Sony Corporation, presented "Planting C4: Cross Compatible External C2 for Your Implants" at DEF CON, addressing a critical challenge in this domain: the lack of portability and extensibility in existing external C2 profiles. His talk unveiled **C4**, a novel tool leveraging **WebAssembly (Wasm)** and the **WebAssembly System Interface (WASI)** to create a truly language-agnostic and framework-independent system for external C2 communications.

AI review

Taylor solves a real, underappreciated problem in the red team tooling space — C2 profile portability — with a technically elegant answer: compile your logic to Wasm, deploy everywhere. The Axism integration is genuinely clever, the demos are concrete, and the work is clearly his own. Not groundbreaking enough to redefine the field, but this is exactly the kind of sharp, practical research DEF CON was built for.

Watch on YouTube