{
	"id": "cd3fc360-2e3b-47ce-a0ca-924aa0cb32f6",
	"created_at": "2026-04-06T01:29:03.580428Z",
	"updated_at": "2026-04-10T03:20:44.126716Z",
	"deleted_at": null,
	"sha1_hash": "fab235c0fc9ef93e59101a9a84736f66a3dd34bb",
	"title": "GitHub - MythicAgents/Nimplant: A cross-platform implant written in Nim",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 198121,
	"plain_text": "GitHub - MythicAgents/Nimplant: A cross-platform implant\r\nwritten in Nim\r\nBy its-a-feature\r\nArchived: 2026-04-06 00:35:37 UTC\r\nDeprecated\r\nThis agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue\r\nworking on it. If somebody wants to make the updates (in the python side of things, not nim code) to the latest\r\nMythic, we can mark it as not deprecated anymore.\r\nNimplant is a cross-platform (Linux \u0026 Windows) implant written in Nim as a fun project to learn about Nim and\r\nsee what it can bring to the table for red team tool development. Currently, Nimplant lacks extensive evasive\r\ntradecraft; however, overtime Nimplant will become much more sophisticated.\r\nInstallation\r\nhttps://github.com/MythicAgents/nimplant\r\nPage 1 of 3\n\nTo install Nimplant, you'll need Mythic installed on a remote computer. You can find installation instructions for\r\nMythic at the Mythic project page.\r\nFrom the Mythic install root, run the command:\r\n./install_agent_from_github.sh https://github.com/MythicAgents/Nimplant\r\nOnce installed, restart Mythic to build a new agent.\r\nHighlighted Agent Features\r\nCross-platform\r\nFully asynchronous\r\nCan generate agents compiled from both C and C++ source code\r\nCommands Manual Quick Reference\r\nCommand Syntax Description\r\ncat cat [file] Retrieve the output of a file.\r\ncd cd [dir] Change working directory.\r\ncp\r\ncp [source]\r\n[destination]\r\nCopy a file from source to destination. Modal popup.\r\ncurl\r\ncurl [url] [method]\r\n[headers] [body]\r\nExecute a single web request.\r\ndownload download [path] Download a file off the target system.\r\nexit exit Exit a callback.\r\ngetenv getenv Get all of the current environment variables.\r\njobs jobs List all running jobs.\r\nkill kill [pid] Attempt to kill the process specified by [pid] .\r\nls ls [path] [recurse]\r\nList files and folders in [path] with optional param to list\r\nrecursively. Defaults to current working directory.\r\nmkdir mkdir [dir] Create a directory.\r\nmv\r\nmv [source]\r\n[destination]\r\nMove a file from source to destination. Modal popup.\r\nps ps List process information.\r\npwd pwd Print working directory.\r\nhttps://github.com/MythicAgents/nimplant\r\nPage 2 of 3\n\nCommand Syntax Description\r\nrm rm [path] Remove a file specified by [path]\r\nshell shell [command]\r\nRun a shell command which will translate to a process being\r\nspawned with command line: cmd.exe /r[command]\r\nunsetenv\r\nsetenv [envname]\r\n[value]\r\nSets an environment variable to your choosing.\r\nsleep sleep [seconds] Set the callback interval of the agent in seconds.\r\nunsetenv unsetenv [envname] Unset an environment variable.\r\nupload upload Upload a file to a remote path on the machine. Modal popup.\r\nSupported C2 Profiles\r\nCurrently, only one C2 profile is available to use when creating a new Nimplant agent: HTTP.\r\nHTTP Profile\r\nThe HTTP profile calls back to the Mythic server over the basic, non-dynamic profile. When selecting options to\r\nbe stamped into Nimplant at compile time, all options are respected with the exception of those parameters\r\nrelating to GET requests.\r\nMore coming soon!\r\nRoadmap\r\n[] Ability to compile to Objective-C for macOS capabilities\r\n[] Integration of Donut to allow user to generate shellcode as output\r\n[] Communication via WebSockets\r\n[] Screenshotting capabilities\r\n[] Remote process injection capabilities\r\nSource: https://github.com/MythicAgents/nimplant\r\nhttps://github.com/MythicAgents/nimplant\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://github.com/MythicAgents/nimplant"
	],
	"report_names": [
		"nimplant"
	],
	"threat_actors": [],
	"ts_created_at": 1775438943,
	"ts_updated_at": 1775791244,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/fab235c0fc9ef93e59101a9a84736f66a3dd34bb.pdf",
		"text": "https://archive.orkl.eu/fab235c0fc9ef93e59101a9a84736f66a3dd34bb.txt",
		"img": "https://archive.orkl.eu/fab235c0fc9ef93e59101a9a84736f66a3dd34bb.jpg"
	}
}