one of the most challenging aspects of creating solid trojan framework is asynchronously controllingupdatingand receiving data from your deployed implants it' crucial to have relatively universal way to push code to your remote trojans this flexibility is required not just to control your trojans in order to perform different tasksbut also because you might have additional code that' specific to the target operating system so while hackers have had lots of creative means of command and control over the yearssuch as irc or even twitterwe'll try service actually designed for code we'll use github as way to store implant configuration information and exfiltrated dataas well as any modules that the implant needs in order to execute tasks we'll also explore how to hack python' native library import mechanism so that as you create new trojan modulesyour implants can automatically attempt to retrieve them and any dependent libraries directly from your repotoo keep in mind that your traffic to github will be encrypted over ssland there are very few enterprises that 've seen that actively block github itself one thing to note is that we'll use public repo to perform this testingif you' like to spend the moneyyou can get private repo so that prying eyes can' see what you're doing additionallyall of your modulesconfigurationand data can be encrypted using public/private key pairswhich demonstrate in let' get started