.NET Agent C#

Deploy a Stage-1 C# (.NET) agent that exposes a low-footprint terminal shell and minimal lifecycle controls (stage2, exit, killagent). Stage 1 is designed to be compact, it provides an interactive terminal shell for operator access and a small set of commands for controlling the agent while keeping memory, disk, and network artifacts to a minimum.

When required, the agent can be upgraded to Stage 2 to enable the full suite of operator tooling. Stage-2 expands capabilities to include host and context enumeration (systeminfo, getuid, currentpath), screen and webcam capture (screenshot, webcam), bidirectional file transfer (download_file, upload_file), remote process listing (listproc), and other post-compromise utilities intended for investigative and validation tasks. The upgrade path is deliberate so that the heavier toolset is only present when explicitly required by the operator session.

If an operation is interrupted or the agent is intercepted, only the Stage 1 footprint will be exposed, minimising the surface visible to an external observer. Use these stages according to your operational plan and the scope of authorised testing. This is designed to separate initial presence from full operator functionality to balance capability with stealth and safety.