Community Feedback and Planning

Mythic 2023 Retrospective and 2024 Planning

What went well and poorly for you with Mythic in 2023? What do you want to see most in 2024?

Question Title

* 1. Which version of Mythic are you using?

Mythic 3.2+ (current Mythic)

Mythic 3.1

Mythic 3.0 (major rewrite, but lots of little bugs)

Mythic 2.3 (oh god why)

Question Title

* 2. Which agents do you use?

Poseidon

Apfell

Apollo

Athena

Merlin

Medusa

Venus

Typhon

Thanatos

Other(s) (please specify)

Question Title

* 3. Which features over the past year do you find most useful?

	Never used	Not useful	Somewhat Useful	More Useful	Extremely useful
Build Steps (the green/ red/ blue circles while building)	Build Steps (the green/ red/ blue circles while building) Never used	Build Steps (the green/ red/ blue circles while building) Not useful	Build Steps (the green/ red/ blue circles while building) Somewhat Useful	Build Steps (the green/ red/ blue circles while building) More Useful	Build Steps (the green/ red/ blue circles while building) Extremely useful
Host File through C2 (the globe icon next to files and payloads)	Host File through C2 (the globe icon next to files and payloads) Never used	Host File through C2 (the globe icon next to files and payloads) Not useful	Host File through C2 (the globe icon next to files and payloads) Somewhat Useful	Host File through C2 (the globe icon next to files and payloads) More Useful	Host File through C2 (the globe icon next to files and payloads) Extremely useful
Add/Remove commands in Payloads/Callbacks for testing	Add/Remove commands in Payloads/Callbacks for testing Never used	Add/Remove commands in Payloads/Callbacks for testing Not useful	Add/Remove commands in Payloads/Callbacks for testing Somewhat Useful	Add/Remove commands in Payloads/Callbacks for testing More Useful	Add/Remove commands in Payloads/Callbacks for testing Extremely useful
Tagging	Tagging Never used	Tagging Not useful	Tagging Somewhat Useful	Tagging More Useful	Tagging Extremely useful
Providing an IP array for callbacks checkin	Providing an IP array for callbacks checkin Never used	Providing an IP array for callbacks checkin Not useful	Providing an IP array for callbacks checkin Somewhat Useful	Providing an IP array for callbacks checkin More Useful	Providing an IP array for callbacks checkin Extremely useful
Updated File/Process browsers	Updated File/Process browsers Never used	Updated File/Process browsers Not useful	Updated File/Process browsers Somewhat Useful	Updated File/Process browsers More Useful	Updated File/Process browsers Extremely useful
Interactive Async Tasking with Follow-up	Interactive Async Tasking with Follow-up Never used	Interactive Async Tasking with Follow-up Not useful	Interactive Async Tasking with Follow-up Somewhat Useful	Interactive Async Tasking with Follow-up More Useful	Interactive Async Tasking with Follow-up Extremely useful
Split tasking view (option dropdown from callback)	Split tasking view (option dropdown from callback) Never used	Split tasking view (option dropdown from callback) Not useful	Split tasking view (option dropdown from callback) Somewhat Useful	Split tasking view (option dropdown from callback) More Useful	Split tasking view (option dropdown from callback) Extremely useful
Callback graph groupings	Callback graph groupings Never used	Callback graph groupings Not useful	Callback graph groupings Somewhat Useful	Callback graph groupings More Useful	Callback graph groupings Extremely useful
Tasking Multiple agents at once	Tasking Multiple agents at once Never used	Tasking Multiple agents at once Not useful	Tasking Multiple agents at once Somewhat Useful	Tasking Multiple agents at once More Useful	Tasking Multiple agents at once Extremely useful

Question Title

* 4. How do you mainly use Mythic?

Operate with agents somebody else created

Operate with agents I modified

Operate with custom agents

Operate with custom Mythic Scripting

Just develop agents for others to use

Other (please specify)

Question Title

* 5. Do you use multiple operations? If so, why?

Question Title

* 6. What has been your biggest hurdle/issue with Mythic?

Not easy to deploy offline

Takes too much space with all the docker containers

Missing documentation for making custom agents (please specify)

Missing documentation for updating existing agents (please specify)

UI bugs or issues (please specify)

Doesn't perform well at my scale (please specify)

Not easy to deploy in an automated fashion (please specify)

No agent supports the features I want/need (please specify)

Other (please specify)

Question Title

* 7. What features do you want most in 2024 for Mythic? Please add context if you can.

Better Payload/Wrapper build process (ex: easier to chain builds together)

More granular scoping for API Tokens

Custom browsers in the UI (think file/process browser, but for registry, ldap, etc)

More Graph views (ex: by specific c2 value, tag, network, group, etc)

Better eventing system without Mythic Scripting (ex: run commands on new callbacks, schedule tasks at certain times, etc)

More Mythic Scripting features

More container functionality via MythicRPC

Different UI View for looking at tasks and output (ex: console-like view without accordions)

More Browser Scripting options

Other (please specify)

Question Title

* 8. What features do you want for agents in 2024? Please add context for agent(s) and specific(s) if you can.

More C2 Profile options (ex: DNS, more 3rd party services, etc)

More C2 Profile configurations (ex: multiple callback domains in http)

More varied agent types (ex: webshell style, different languages, etc)

Specific feature added to existing agents (ex: an agent without socks to support socks)

Multiplatform support added/extended for existing agents (ex: poseidon to support windows)

New agent features overall that don't exist in any public agent

Tracking with agent and Mythic for some component (ex: token tracking/usage, better sleep tracking, etc)

Other (please specify)

Question Title

* 9. Any other comments? issues? questions? requests? Let me know!

Question Title

* 10. Did you know the Bloodhound slack is an open community with a #mythic channel? Did you know you can sign up here: https://bloodhoundgang.herokuapp.com/?

Yes

Question Title

* 11. If you'd like to discuss your responses or allow me to ask follow-on questions, please leave some way for me to contact you (twitter, slack, email, something)