Overview

JustC2 maintains a target database that tracks discovered hosts on the network. Targets can be added automatically when agents check in, or manually by operators as they enumerate the environment.

Target Fields

FieldDescription
Target IDUnique identifier
ComputerHostname
DomainNetwork domain
AddressIP address
OSOperating system (Windows, Linux, macOS)
OS DescriptionDetailed OS version
TagCustom label
InfoAdditional notes
DateWhen the target was discovered
AliveWhether the host is currently reachable
AgentsList of agent sessions on this target

Targets Tab

The Targets tab shows all discovered hosts in a table with OS icons:

  • Blue icon — Active target with agents
  • Red icon — Compromised target (owned)
  • Grey icon — Discovered but no active agents

Adding Targets Manually

Click Add to register a host:

  1. Enter the hostname, domain, and IP address
  2. Select the operating system
  3. Add tags and notes
  4. Mark whether the host is alive

Editing Targets

Right-click → Edit to update target information as you learn more about the host.

Removing Targets

Right-click → Remove to delete a target entry.

Tagging Targets

Right-click → Set Tag to categorize targets (e.g., dc, web-server, database, workstation).

Automatic Target Creation

When an agent checks in, the teamserver automatically creates or updates a target entry with:

  • The agent’s hostname and IP information
  • OS detection based on the agent’s reported data
  • Agent association (the target’s Agents list is updated)

Network Mapping

The targets database, combined with the Sessions Graph view, provides a visual map of the compromised network. Use targets to:

  1. Track which hosts have been discovered
  2. Identify high-value targets (domain controllers, file servers, databases)
  3. Plan lateral movement paths
  4. Document the engagement scope coverage