CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[v1.6.4] - 2026-03-12

Changed

• Added new taskData.args.IsArgUserSupplied(name string) bool function
  • Allows devs to see if a specific arg has a value due to the default value or explicit user addition

[v1.6.3] - 2025-12-15

Changed

• Updated SendMythicRPCTaskCreate to require OperatorID, TaskID, or EventStepInstanceID
  • This allows the new task to be associated with the proper user instead of the callback creator

[v1.6.2] - 2025-12-11

Changed

• Added new fields to the CustomBrowser Export functionality
• Added ability to create file with OperationID and OperatorID

[v1.6.1] - 2025-12-10

Changed

• Added new custombrowserstructs.CustomBrowserDefinition
• Added new HideConditionOperand values for PayloadType's BuildParameter Hide Conditions
• Added VerifierRegex option to Command Parameters
• Updated SendMythicRPCCallbackCreate to allow supplying Cwd and ImpersonationContext parameters
• Updated SendMythicRPCCallbackUpdate to allow supplying Cwd, ImpersonationContext, and Dead parameters
• Added SendMythicRPCCallbackTokenSearch
• Added SendMythicRPCCustomBrowserSearch
• Added new Service MythicServiceCustomBrowser when starting your main program
• Fixed Webhook and Logger services not responding to OnContainerStart messages
• Updated ContainerVersion to "v1.4.1"

[v1.6.0] - 2025-10-29

Changed

• Added a new RPC for SendMythicRPCCallbackEdgeRemove
• Added a new RPC for SendMythicRPCHandleAgentMessageJson
• Updated the following MythicRPC calls to be consistent about CallbackID, AgentCallbackID, and the use of ID in general:
  • CallbackID is always an Int, AgentCallbackID is the UUID string, and all ID variables should have capital ID not Id
  • SendMythicRPCCallbackDecryptBytes: AgentCallbackUUID -> AgentCallbackID
  • SendMythicRPCCallbackEdgeSearch: AgentCallbackUUID -> AgentCallbackID, AgentCallbackID -> CallbackID
  • SendMythicRPCCallbackEncryptBytes: AgentCallbackUUID -> AgentCallbackID
  • SendMythicRPCCallbackSearch: AgentCallbackUUID -> AgentCallbackID, AgentCallbackID -> CallbackID, SearchCallbackUUID -> SearchAgentCallbackID
  • SendMythicRPCCallbackUpdate: AgentCallbackUUID -> AgentCallbackID
  • SendMythicRPCCallbackTokenCreate: TokenId -> TokenID
  • SendMythicRPCFileCreate: AgentFileId -> AgentFileID
  • SendMythicRPCFileSearch: AgentFileId -> AgentFileID
  • SendMythicRPCOperationEventLogCreate: TaskId -> TaskID, CallbackId -> CallbackID, AgentCallbackId -> AgentCallbackID, OperationId -> OperationID
  • SendMythicRPCPayloadOnHostCreate: PayloadId -> PayloadID
  • Because all of these are technically breaking changes, I bumped the tagged version to 1.6 and the container version to 1.4

[v1.5.2] - 2025-10-28

Changed

• Added UiPosition options for Payload Type Build Parameters and C2 Profile Parameters
• Added DynamicQueryFunction option for Payload Type Build Parameters
• Updated the processing for CommandHelpFunction available to Payload Types

[v1.5.1] - 2025-10-22

Changed

• Updated the c2 add icon/dark mode icon to not exit when failing to read the files
• Added cwd and impersonation_context to webhook new callback data

[v1.5.0] - 2025-10-07

Changed

• Added semver fields to all service definitions
• C2 Profiles can now report back agent_icon and dark_mode_agent_icon just like payload types
• Payload type build parameters now have a supported_os, group_name, and hide_conditions fields
  • hide conditions allow you to specify when a specific build parameter should be hidden from user view
  • group_name allows you to group like-parameters together in the UI
  • supported_os allows you to limit build parameters to certain OS selections
• Payload type how has a c2 deviations parameter that allows you to modify fields of supported C2 profiles
  • for example - alter the defaults, change dropdown options, hide parameters completely
• Payload type now has option to specify custom help function

[v1.4.22] - 2025-08-27

Changed

• Fixed a bug where ContainerOnStart wasn't getting applied to loggers or webhooks

[v1.4.21] - 2025-03-28

Changed

• Updated the C2RPCOtherServiceRPCMessageResponse to support indicating a RestartInternalService field
  • this allows c2 services to indicate a restart is necessary of their internal services
  • this function was returning without checking this response field first
• Added SearchParentTaskID option for MythicRPCTaskSearch
  • Needs Mythic 3.3.1-rc56
• Updated DynamicQueryFunction definition
  • You can now access OtherParameters which are the other parameters and their values
  • Needs Mythic 3.3.1-rc56
• New MythicRPC calls related to tags
  • Needs Mythic 3.3.1-rc56
• New ability to intercept interactive tasking follow-on messages in task
  • Needs Mythic 3.3.1-rc56

[v1.4.20] - 2025-03-13

Changed

• Updating eventing conditional check response struct tag

[v1.4.19] - 2025-03-12

Changed

• Updated some of the rabbitmq retry logic

[v1.4.18] - 2025-03-05

Changed

• Added some loops around communicating over rabbitmq in case there are errors that should self recover

[v1.4.17] - 2025-02-20

Changed

• Updated fixed an issue where payload types were waiting for the wrong group of events to finish before syncing
• Fixed an issue with rabbitmq retries that would block on channel creation
• Changed RPC timeout to 20s instead of 30s

[v1.4.16] - 2025-02-10

Changed

• Few rabbitmq queue definition tweaks
• re-ordered the syncing process so that translation containers sync before payload types

[v1.4.15] - 2025-02-07

Changed

• Removed some rabbitmq configs that clashed with existing rabbitmq settings

[v1.4.14] - 2025-02-07

Changed

• Updated the rabbitmq handling to be more resilient in errors

[v1.4.13] - 2025-01-29

Changed

• Added an option to remove an existing command
• Added additional attributes for MythicRPCCallbackUpdate for updating last checkin time

[v1.4.12] - 2025-01-24

Changed

• Updated PayloadType syncing to wait for all rabbitmq routes to be created first before syncing to Mythic
• Updated error message about duplicated names to be a debug message instead

[v1.4.11] - 2024-12-14

Changed

• Updated MythicRPCCallbackSearch to specify a list of payload types
• Updated MythicRPCCallbackAddCommand and MythicRPCCallbackRemoveCommand to take in a list of callback ids

[v1.4.10] - 2024-12-13

Changed

• Added a flag when syncing payload type data to indicate if it's a ForcedResync
  • ForcedResyncs don't trigger the onStart container functionality again to prevent infinite loops

[v1.4.9] - 2024-11-22

Changed

• Updated MythicRPCCallbackAddCommand and MythicRPCCallbackRemoveCommands with additional options
• Updated CreateTasking response with new field, ReprocessAtNewCommandPayloadType
  • Setting that allows processing execution to transfer to the new payload type and new CommandName specified

[v1.4.8] - 2024-11-18

Changed

• Updated the server stop function to not return error if the server wasn't already running

[v1.4.7] - 2024-10-28

Changed

• Added support for specifying username/password when issuing stop for proxies
• Added new field for payload type definition allowing the use of display params vs original params when showing the cli history

[v1.4.6] - 2024

Changed

• ContainerVersion v1.3.4
• Added support for remove option in Hosting files via C2
• Added a mutex around C2 functions
• Added username/password options when starting socks proxy

[v1.4.5] - 2024-09-04

Changed

• ContainerVersion v1.3.3
• Added Support for Payload and Staging UUIDs to be used in the MythicRPCCallbackEncrypt and MythicRPCCallbackDecrypt functions

[v1.4.4] - 2024-08-31

Changed

• added missing json tag

[v1.4.3] - 2024-08-30

Changed

• Moved the OnNewCallback function around

[v1.4.2] - 2024-08-30

Changed

• Fixed the C2 Debug Output routine to send final finishedReadingOutput flag

[v1.4.0] - 2024-07-09

Changed

• This is updated to work with Mythic 3.3+ and will cause some issues with Mythic 3.2 and below
• New Auth
• New Eventing
• New Build/C2/Command parameter options of ChooseOneCustom and FileMultiple
• New Logging options
• Added MythicRPCAPITokenCreate
• Added MythicRPCCallbackNextCheckinRange
• Added MythicRPCFilebrowserParsePath

[v1.3.13] - 2024-03-29

Changed

• Fixed an issue with getting array args from C2 Profile Parameters

[v1.3.12] - 2024-03-25

Changed

• Updated gRPC specs for PushC2 to also allows OneToMany streaming

[v1.3.11] - 2024-03-19

Changed

• Updated the logging package to not use logr and properly track warning/trace level messages

[v1.3.10] - 2024-03-08

Changed

• Updated the onNewCallbackFunc to have the proper log information and if the function is missing, simply log info message instead of error

[v1.3.9] - 2024-03-05

Changed

• Added OperatorUsername and OperationName to the PTTaskMessageCallbackData struct with Mythic v3.2.19

[v1.3.8] - 2024-03-04

Changed

• Added the AgentType field to Payload Type definitions to support more kinds of payload types

[v1.3.7] - 2024-02-27

Changed

• Fixed an issue where double parsing was breaking wrapper builds

[v1.3.6] - 2024-02-12

Changed

• Added a message_format field to payload type definitions for use at a later date
• Added a secrets field to the following fields that gets user-supplied secrets from their settings page
  • PTRPCDynamicQueryFunctionMessage
  • PayloadBuildMessage
  • PTOnNewCallbackAllData
  • PTTaskMessageAllData
• Updated the processing of stdout/stderr for running c2 profiles to only be the first 200 lines, extra are dropped

[v1.3.5] - 2024-02-06

Changed

• Added the ServerName attribute to all webhookMessageBase and loggingMessageBase structs

[v1.3.4] - 2024-02-05

Changed

• Updated the SubmitWebRequest method to always return the body and status code so the client can check success or error on their own

[v1.3.3] - 2024-01-15

Changed

• Fixed the fetching of typed array values
• Added a check to make sure that typed array values are always having their parsing function called

[v1.3.2] - 2024-01-11

Changed

• Removed the FileRegister MythicRPC Call
• Updated the FileCreate MythicRPC Call to allow TaskID, PayloadUUID, or AgentCallbackID to be supplied
  • This makes it possible to register new files with Mythic during payload build, translation containers, etc
• Updated the DynamicQuery Parameters to now also have PayloadOS, PayloadUUID, CallbackDisplayID, and AgentCallbackID
  • This should make it easier to use MythicRPC functionality to make more informed decisions
• Updated container version to v1.1.4, Needs Mythic v3.2.13+

[v1.3.1] - 2024-01-10

Changed

• Added new MythicRPC function for searching a callbacks' edges
• Added new MythicRPC function for created a task in a specific callback
• Added new Payload definition function for onNewCallback

[v1.2.1] - 2023-12-05

Changed

• Pulled in a PR from @MEHrn00 to fix a typo in one of the MythicRPC calling definitions
• Removed the init function in the mythicutils package and added a log.fatalf check within rabbitmq, grpc, and mythicutils for MYTHIC_SERVER_HOST and RABBITMQ_HOST
  • The presence of these variables for use with connecting to Mythic via rabbitmq, grpc, and http are checked right before use rather than on initialization of their modules
  • This allows easier testing of various components

[v1.2.0] - 2023-11-29

Changed

• Pulled in PR from @MEhrn00 to refactor config/utils into separate packages for more modular testing
  • This could break things if you relied on github.com/MythicMeta/MythicContainer/utils for something

[v1.1.2] - 2023-11-07

Changed

• Merged in PR to fix race condition for starting c2 profiles
• Added in "File" to C2 Profile Parameter types

[v1.1.1] - 2023-10-30

Changed

• Fixed an issue with the input type for the MythicRPCCredentialCreate RPC call

[v1.1.0] - 2023-10-02

Changed

• Added gRPC classes for Push C2
• Added C2 RPC calls for hosting files
• Added PayloadType RPC calls for parsing TypedArray values
• Added TypedArray values for Build, Command, and C2 parameters
• Updated ProxyStart/ProxyStop commands to take an optional local_port of 0 and have it dynamically chosen
• Updated BuildStep to support "Skip"

[v1.0.9-rc12] - 2023-07-17

Changed

• Fixed the tracking for c2 service binaries

[v1.0.9-rc11] - 2023-07-12

Changed

• Fixed the taskData.Args.GetArrayArg to properly cast to []string from []interface{}

[v1.0.9-rc10] - 2023-06-26

Changed

• Added the WrappedPayloadUUID value to a payload build message so you don't just get the raw bytes

[v1.0.9-rc09] - 2023-06-09

Changed

• Updated the grpc code to set maxInt for the send/recv limits with the translation containers

[v1.0.9-rc08] - 2023-06-08

Changed

• Added additional check if given a string and no parseArgString function defined, to just default to the raw command line

[v1.0.9-rc07] - 2023-06-01

Changed

• Updating queue name for logging/webhooks to be unique so we don't round robin the information

[v1.0.9-rc06] - 2023-06-01

Changed

• Added a fix to register new response logging data

[v1.0.9-rc05] - 2023-05-31

Changed

• Added new logging type for responses

[v1.0.9-rc04] - 2023-05-23

Changed

• Updated the SendMythicRPCFileUpdate function to support changing the DeleteAfterFetch attribute

[v1.0.9-rc02] - 2023-05-23

Changed

• Modified many of the similar C2 message structs to support new helper functions for getting arguments
• Modified the use of the supplied parameter group from the Mythic UI to be a tie breaker rather than as a manually set group name

[v1.0.9-rc01] - 2023-05-22

Changed

• Added base functionality for two new C2 RPC functions - GetIOC and SampleMessage
• Changed PayloadBuildMessage.BuildParameters to be a struct with a Parameters map inside of it
  • Added a suite of helper functions on it to get build parameters of various types
• Updated PTTaskMessageArgsData.Get*Arg functions to return default type-based blank values if nil
• Added suite of helper functions to PayloadBuildMessage.PayloadBuildC2Profile entries for getting C2 Parameter arguments
• Bumped the container version to v1.1.0 to account for new getIOC and SampleMessage C2 RPC Functionality

[v1.0.8] - 2023-05-22

Changed

• Updated tasking to make sure specified parameter groups in the UI carry over
• Updated tasking to list out unused parameters via the task's stdout/stderr modal

[v1.0.7] - 2023-05-17

Changed

• Updated the constant definitions for SupportedOS values to match the PyPi side with a capital first letter for all but macOS

[v1.0.6] - 2023-05-10

Changed

• Fixed the logging service capabilities to respect the log level defined (it was being overridden by Mythic's logging level)
• Fixed translation services gRPC connections that weren't reconnecting

[v1.0.5] - 2023-05-09

Changed

• Updated the way manual parameter group name is set during create tasking - now use taskData.Args.SetManualParameterGroup

[v1.0.0-rc13] - 2023-04-25

Changed

• Fixed a bug where new alert and new custom webhook fields weren't tracked for existence

[v1.0.0-rc12] - 2023-04-21

Changed

• Added the ability to return updated filename when building payloads
• Added a lot of docstrings for agent structures/building

[v1.0.0-rc11] - 2023-04-10

Changed

• Fixed an issue with RabbitMQ Channels not closing resulting in an ID leak

[v1.0.0-0.0.10] - 2023-03-20

Added

• Added new structs for connection information command parameters to be more verbose

[v1.0.0-0.0.9] - 2023-03-15

Changed

• Updated create tasking functions to take pointer rather than value
• Started adding text descriptions for structs to make it easier for development

[v1.0.0-0.0.8] - 2023-03-14

Changed

• updated some structs to uint64 from int to match Mythic

[v1.0.0-0.0.7] - 2023-03-12

Changed

• fixed an issue with the Process response message routing to itself

[v1.0.0-0.0.6] - 2023-03-03

Changed

• fixed an issue where default int values weren't getting processed properly

[v1.0.0-0.0.4] - 2023-03-01

Changed

• updated the utils submodule to initialize on init() so that Mythic configuration can more easily be used in other projects

[v1.0.0-0.0.3] - 2023-03-01

Changed

• updated the logging submodule to initialize on init() for easier inclusion in other projects

[v1.0.0-0.0.0] - 2023-02-28

Added

• Created the initial push of this code