Dark is a Crystal-written Mythic C2 agent and, per its author, the first open-source one doing in-memory BOF execution on macOS and Linux with no disk writes and no child processes. It implements custom dynamic linking to handle ELF and Mach-O object files (Apple Silicon included, W^X enforcement and all), ships 25 built-in BOFs, and runs them concurrently, closing a real capability gap on the platforms where EDR is still working out what a process even is. The author’s aside about “the AI slop, vibe coded agent graveyard” that has since taken over GitHub is, regrettably, accurate.
