Overview

JustC2 is designed for team operations. Multiple operators can connect to the same teamserver simultaneously, with real-time synchronization of all data through WebSocket connections.

Configuring Operator Accounts

Password-Only Mode (Simple)

For quick setups or solo use:

Teamserver:
  password: "SharedTeamPassword"
  only_password: true

All operators connect with any username and the shared password. Actions are attributed to whatever username they provided at login.

For team engagements with accountability:

Teamserver:
  password: "FallbackPassword"
  only_password: false
  operators:
    alice: "AliceSecurePass123"
    bob: "BobSecurePass456"
    charlie: "CharlieSecurePass789"

Each operator must authenticate with their specific credentials. This enables:

  • Per-operator action attribution in logs
  • Individual accountability for commands executed
  • The ability to revoke access for a specific operator

Real-Time Synchronization

When an operator performs an action, all connected operators receive the update in real time:

  • New agent session — Appears in all operators’ session tables immediately
  • Task output — Console output is streamed to all operators viewing that agent
  • Listener changes — Starting/stopping listeners is reflected across all clients
  • Downloads — Download progress is visible to all operators
  • Credentials and targets — Updates propagate instantly

Event Subscriptions

Operators can subscribe to specific event categories to control which notifications they receive. This is useful in large engagements where not every operator needs to see every event.

Subscription categories are configured in the client when connecting or through the subscription settings after connecting.

Operator Chat

The built-in chat system allows operators to communicate directly within the JustC2 interface:

  • Messages are timestamped and attributed to the sending operator
  • Chat history is synchronized when new operators connect
  • No external communication tools needed during the engagement

Console Team Mode

JustC2 supports a “team mode” for the agent console where all operators can see each other’s commands and output for a given agent session. This facilitates:

  • Knowledge sharing during an engagement
  • Avoiding duplicate commands on the same target
  • Training and mentoring scenarios

Best Practices

  1. Use per-operator accounts for any multi-person engagement
  2. Coordinate before executing destructive or noisy commands
  3. Use tags and colors to mark sessions assigned to specific operators
  4. Monitor the chat for team coordination messages
  5. Use unique usernames that are easy to attribute in logs