ProjectD is a proof-of-concept that demonstrates how attackers could leverage Google Drive as both the transport channel and storage backend for a command-and-control (C2) infrastructure.

Main C2 features: - Persistent client ↔ server heartbeat; - File download / upload; - Remote command execution on the target machine; - Full client shutdown and self-wipe; - End-to-end encrypted traffic (AES-256-GCM, asymmetric key exchange).

Code + full write-up: - GitHub: https://github.com/BernKing/ProjectD - Blog: https://bernking.xyz/2025/Project-D/