Stats
Actions
Tags
From mythic-c2-readonly
Use when reviewing Mythic C2 operation data in read-only mode — viewing callbacks, task history, credentials, files, artifacts, and other collected data.
How this skill is triggered — by the user, by Claude, or both
Slash command
/mythic-c2-readonly:mythic-c2-readonlyThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Query Mythic C2 operation data without executing commands or modifying state. Credentials are configured in the server environment — they never appear in conversations.
Query Mythic C2 operation data without executing commands or modifying state. Credentials are configured in the server environment — they never appear in conversations.
Set env vars in the MCP server environment: MYTHIC_SERVER_IP, MYTHIC_SERVER_PORT, MYTHIC_PASSWORD (or MYTHIC_API_TOKEN).
get_status — verify connection and current operationlist_callbacks --active_only — see live agentslist_tasks --callback_id N — command history for a callbacklist_credentials — discovered credentialslist_files — downloaded/uploaded filessearch "<term>" — cross-type search| Tool | Purpose |
|---|---|
get_status | Connection info and current operation |
list_callbacks | List callbacks (agents); filter with active_only |
get_callback | Full details for a single callback |
list_tasks | Executed commands (filter by callback, paginated) |
get_task_output | Decoded task output with line paging |
list_credentials | Discovered credentials |
list_files | Downloaded/uploaded files |
get_file_contents | Download file to /tmp/mythic-readonly/ + preview |
list_artifacts | IOCs/artifacts |
list_keylogs | Keylog captures |
list_screenshots | Screenshot metadata |
list_processes | Captured process listings |
list_file_browser | File system data from agents |
list_tokens | Windows token captures |
search | Cross-type search (tasks, credentials, files, artifacts, keylogs) |
get_task_output supports line-based paging via max_lines and offset. For big command output, request chunks rather than the whole thing.
get_file_contents saves the file to disk and returns a preview plus the path — use your Read tool on the saved path with offset/limit for targeted access to large files.
This server CANNOT execute commands, modify callbacks, create tasks, or change any Mythic state.
The original CLI script is still available at scripts/mythic_read.py for standalone use:
uv run {baseDir}/scripts/mythic_read.py <command> [options]
Searches MemPalace before answering questions about past work, people, projects, or prior decisions. Returns verbatim stored content instead of guessing from model memory.
Guides Payload CMS config (payload.config.ts), collections, fields, hooks, access control, APIs. Debugs validation errors, security, relationships, queries, transactions, hook behavior.
Implements vector databases with Pinecone, Weaviate, Qdrant, Milvus, pgvector for semantic search, RAG, recommendations, and similarity systems. Optimizes embeddings, indexing, and hybrid search.
npx claudepluginhub s3cr1z/capabilities --plugin mythic-c2-readonly