PLUTON: A Discord-Based Command-and-Control (C2) Framework with Offensive Simulation and Detection Capabilities

Abstract

In modern cybersecurity, Command-and-Control (C2) frameworks play a critical role in remote system administration and the operation of advanced malware. This project, titled PLUTON: A Discord-Based Command-and-Control (C2) Framework with Offensive Simulation and Detection Capabilities, presents a novel approach to designing a C2 system by leveraging the Discord platform as a communication medium in a controlled, safe testing environment. The proposed system integrates both offensive and defensive components, enabling users to simulate real-world cyberattack scenarios while also developing mechanisms for detecting such activities. The framework consists of a Discord bot acting as the C2 server, a client module capable of executing commands, and a builder module that converts Python scripts into executable files with added obfuscation. It supports functionalities such as remote command execution, file management, system monitoring, and multimedia capture. Additionally, the project incorporates detection techniques to identify suspicious behaviours associated with advanced evasion strategies. By combining practical implementation with security analysis, the system serves as an educational tool for understanding modern C2 architectures, malware behaviour, and defensive strategies in cybersecurity research.