A simple Command & Control server built with Flask and Socket.IO for learning mobile security.
Educational purposes only. Do not use on devices without permission.
- JWT Authentication
- WebSocket (Socket.IO)
- Rate Limiting
- Admin Dashboard
- Modular Structure
# Clone
git clone https://github.com/sideffectt/ispy-c2-server.git
cd ispy-c2-server
# Install
pip install -r requirements.txt
# Configure
cp .env.example .env
# Edit .env with your settings
# Run
python run.py| Endpoint | Method | Description |
|---|---|---|
/api/auth |
POST | Get JWT token |
/api/devices |
GET | List devices |
/api/health |
GET | Health check |
├── app/
│ ├── auth/ # JWT authentication
│ ├── models/ # Database models
│ ├── routes/ # API & WebSocket
│ ├── middleware/ # Rate limit, validation
│ └── utils/ # Logging
├── run.py
└── .env.example
- Python 3.9+
- Flask
- Socket.IO
- SQLite
- JWT
Educational use only. See LICENSE.