Beacon changes the polling frequency.

Cat prints the contents of the file.

CD changes the current working directory.

Clipboard reads the clipboard.

Download sends the file to Slack.

Find searches the current directory for the glob.

GetIP gets the external WAN outbound ip of this machine.

GetUID is an alias for whoami.

Hostname is an alias for whoami.

IFConfig dumps interface and network information.

Kill kills the implant process.

List the files in the given directory.

MkDir creates the given directory.

PWD gets the current working directory.

Revive reregisters the implant with the channel.

RM removes the given file or empty directory.

RMDir removes the given empty directory.

Screenshot takes screenshot(s) and uploads them.

Sleep pauses for N seconds.

Upload retrieves a file from a URL and writes it to disk.

WhoAmI returns the current user.