Overview

GopherTCP is an external listener designed for the Gopher agent type. It registers TCP endpoints for lightweight, Go-based agents that target Linux systems.

Characteristics

PropertyValue
NameGopherTCP
TypeExternal
ProtocolTCP
AgentGopher
PlatformsLinux

Creating a GopherTCP Listener

  1. Open the Listeners tab
  2. Click Create
  3. Select GopherTCP
  4. Configure:
    • Name — Unique name (e.g., gopher-main)
    • Bind Host — Interface to listen on
    • Bind Port — TCP port
    • Agent Address — The address agents use to connect
  5. Click Start

Gopher vs. Beacon

FeatureGopherBeacon
PlatformsLinux onlyWindows, Linux, macOS
ProtocolsTCP onlyHTTP, TCP, SMB, DNS
Multi-listenerYesNo
Binary sizeSmallerLarger
Feature setCore commandsFull feature set

Gopher is designed as a lightweight alternative to Beacon for Linux targets. It supports multiple listener connections simultaneously (multi_listeners: true), meaning a single Gopher agent can connect to multiple GopherTCP listeners for redundancy.

Use Cases

  • Linux-focused engagements — When targets are exclusively Linux
  • Smaller payload — When binary size matters (e.g., limited upload bandwidth)
  • Redundant C2 — Multiple listener connections provide failover
  • Containerized environments — Lightweight agent suitable for container targets