nirvanaon/spotifyc2

SpotifyC2 is a Windows-based program written in C that demonstrates how a public cloud service can serve as a command channel for a controlled test environment. An operator renames a Spotify playlist to whatever shell command they want executed, and a client program running on a Windows machine polls that playlist every 20 seconds, reads the title, runs the command, and sends the output back to a Telegram chat. No dedicated server is involved. The project intentionally avoids needing a Spotify developer account or OAuth login. It uses Spotify's public oEmbed endpoint, a URL that returns basic metadata about any playlist without authentication. The client downloads that metadata with libcurl, parses the playlist title, executes the command with a Windows system function that captures standard output, URL-encodes the result, and posts it to a Telegram bot via its HTTP API. All traffic travels over HTTPS. The codebase is a single C source file with five functions: one to fetch the Spotify playlist title, one to run the command and capture its standard output, one to send output to Telegram, one network data callback, and one URL encoder. To build it you need Visual Studio 2022, the Windows SDK, and libcurl. Before compiling you set four constants directly in the source: the Spotify playlist ID, the Telegram bot token, the chat ID, and the polling interval, which defaults to 20 seconds. Commands are only executed when the playlist title changes. The README is explicit that this is security research for defensive purposes: studying how legitimate services can be misused as covert channels, generating realistic network traffic for detection engineering, and supporting threat emulation in authorized lab settings. It includes a disclaimer requiring explicit permission before deploying on any network.