I ditched SSL transport as managing two protocols at the same time is tiring. I decided to stich with HTTPS as it is enough for 99% cases and is more stealthy. Messages are now encrypted and sent in base64, on server side - decoded and decrypted.

server/command_codes.go

@@ -0,0 +1,28 @@
+package main
+
+var TaskCodeMap = map[int]string{
+	777: "TASK",
+
+	10:  "sleep",
+	20:  "cmd",
+	30:  "powershell",
+	40:  "inject-self",
+	50:  "inject-remote",
+	60:  "spawn",
+	70:  "runexe",
+	80:  "rundll",
+	90:  "getinfo",
+	100: "cd",
+	110: "ls",
+	120: "dir",
+	130: "pwd",
+	140: "ps",
+	150: "keylogger",
+	160: "persistence",
+	170: "download",
+	180: "upload",
+	190: "files",
+	200: "proxy",
+	210: "kill",
+	220: "cleanup",
+}