Mythic 4: More Than Just UI Updates

SpecterOps has released a major update to Mythic, the popular open-source C2 framework. Version 4 is currently in Public Beta, and the developers explicitly warn against migrating production infrastructure without prior testing.

What's new in Mythic 4: • AI Chat Containers — AI models can now be integrated into operations as separate services. Instead of giving the model full access, Mythic uses scoped API tokens with granular read/write permissions. • Human-in-the-loop for automation and AI — potentially dangerous actions can be paused pending operator approval. • Operation Chat — each operation has a general channel with support for system messages, searchable history, and markdown-formatted messages. Eventing workflows that require approval or input from an operator can place an interactive card directly in the operation's chat. • Resumable File Transfers — interrupted large file transfers can now resume from the appropriate offset instead of starting over. • Inline Task References — instead of copying credentials and huge Base64 blobs, you can reference data already stored in Mythic (@cred:42.credential, for example, references the credential field of credential ID 42). • Operator Aliases — custom aliases for commands and values, with export/import support. • Interactive File Editor Protocol — compatible agents can open remote text files, edit them directly in the interface, and save the changes back to the remote system. • Updated UI and terminal — XTerm.js, line/raw-key modes, a redesigned workflow editor, and improved handling of Kerberos tickets and JWTs.

The Public Beta will run for several months. The developers plan to use this period to update agents, C2 profiles, and integrations, as well as identify and resolve issues before the stable release.

Tool: https://github.com/its-a-feature/Mythic/tree/Mythic-v4.0.0