This is an attack simulation tool. It can be executed from its C&C server but also from other machines in your network. By that you can simulate different scenarios like: what would have happen if my web server is compromised; or what if someone steal credential of a member of the IT team