#

c2

Here are 152 public repositories matching this topic...

Ne0nd0g / merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

agent golang http2 post-exploitation c2 command-and-control

Updated Apr 13, 2022
Go

cobbr / Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

covenant dotnet dotnet-core red-team c2

Updated Feb 26, 2022
C#

BishopFox / sliver

Adversary Emulation Framework

dns golang http gplv3 dns-server sliver red-team security-tools c2 red-team-engagement command-and-control implant adversarial-attacks red-teaming adversary-simulation

Updated May 30, 2022
Go

Empire

BC-SECURITY / Empire

Open

[BUG] 'remove stale agent' API does not actually remove the stale agents

1

WhyNotPal commented Feb 14, 2022

Note: Please fill out all sections (if applicable) and do not delete the below section headers, otherwise the bot will close the issue.

Empire Version

Empire 4.3.3 BC Security Fork

OS Information (Linux flavor, Python version)

OS: kali 2021.1
Python: 3.9.1

Describe the bug

The 'remove stale agents' API does not work. Calling
(according to https://github.com/Empir

bug good first issue

Open

[BUG] Module search over API not working

bats3c / shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

c docker dotnet shellcode red-team c2 shad0w

Updated Sep 29, 2021
C

phpsploit

nil0x42 / phpsploit

Open

plugins/proclist: Implement a full-php way to get process list in Linux

2

nil0x42 commented Oct 3, 2020

Current implementation of proclist plugin uses win32_ps_list_procs() php function on Windows host.

Therefore, linux implementation is a simple system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.

A better implementation should avoid relying on system command execution.

to be documented stealth good first issue

skerkour / black-hat-rust

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Updated May 24, 2022
Rust

Khepri

geemion / Khepri

Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++ like CobaltStrike.

windows macos linux golang qt backdoor cross-platform grpc trojan rat macosx post-exploitation beacon cobalt-strike red-team c2 redteam cobaltstrike

Updated Mar 11, 2022
C++

nettitude / PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

csharp powershell python3 payloads c2 redteam poshc2 nettitude proxy-aware poshc2-installation

Updated May 18, 2022
PowerShell

alphaSeclab / awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

rat malware-analysis c2 command-and-control remote-access-tool remote-administration-tool command-control rat-analysis rat-malware

Updated Feb 17, 2020

cyberark / kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

agent kubernetes golang security containers http2 post-exploitation security-tools c2 penetration-testing-framework command-and-control red-teams penetration-testing-tools redteam-tools

Updated May 3, 2022
Go

Starkiller

BC-SECURITY / Starkiller

Starkiller is a Frontend for PowerShell Empire.

hacktoberfest empire c2 redteam-infrastructure

Updated Mar 17, 2022
Vue

DeimosC2

DeimosC2 / DeimosC2

DeimosC2 is a Golang command and control framework for post-exploitation.

golang https infosec quic hacktoberfest red-team doh security-tools c2

Updated May 23, 2022
Vue

c2lang / c2compiler

the c2 programming language

c programming-language compiler c2

Updated May 30, 2022
C++

mhaskar / Octopus

Open source pre-operation C2 server based on python and powershell

python security powershell pentesting c2 redteam

Updated Jul 6, 2021
Python

S1ckB0y1337 / Cobalt-Strike-CheatSheet

Some notes and examples for cobalt strike's functionality

cobalt cheatsheet cobalt-strike c2 redteaming redteam

Updated Feb 8, 2022

sensepost / godoh

🕳 godoh - A DNS-over-HTTPS C2

dns golang dns-over-https doh c2 command-and-control

Updated Mar 1, 2022
Go

Coalfire-Research / Slackor

A Golang implant that uses Slack as a command and control server

python golang penetration-testing pentest red-team remote-admin-tool c2 command-and-control penetration-testing-tools

Updated Apr 7, 2021
Python

Cr4sh / MicroBackdoor

Small and convenient C2 tool for Windows targets. [ Сотрудникам ФСБ РФ, КГБ РБ и др. использующим этот инструмент: когда наши танки въедут в Москву, мы тебя повесим © 😇 ]

python windows backdoor malware shellcode c2

Updated Mar 8, 2022
C++

postrequest / link

link is a command and control framework written in rust

rust penetration-testing pentesting payload red-team c2 command-and-control implant

Updated Aug 18, 2021
Rust

alphaSeclab / awesome-cyber-security

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

Updated Dec 23, 2019

Ziconius / FudgeC2

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

security powershell python3 cybersecurity post-exploitation offensive-security security-tools c2 command-and-control redteam implant purpleteam readteaming

Updated May 7, 2022
Python

Nebula

gl4ssesbo1 / Nebula

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Components.

aws cloud enumeration pentesting nebula c2 reconnaissance

Updated Nov 2, 2021
Python

tokyoneon / CredPhish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

shell dns backdoor reverse-shell penetration-testing dns-server information-security kali-linux offensive-security exfiltration kali bypass-antivirus antivirus-evasion c2 social-engineering kali-scripts amsi

Updated Jul 27, 2021
PowerShell

enkomio / AlanFramework

A C2 post-exploitation framework

security hacking post-exploitation hacking-tool red-team c2 red-teaming security-tool

Updated May 20, 2022
JavaScript

3ct0s / disctopia-c2

Windows Remote Administration Tool that uses Discord as C2

backdoor discord discord-bot rat c2 command-and-control disctopia

Updated May 30, 2022
Python

looCiprian / GC2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

golang malware c2 command-and-control

Updated Nov 15, 2021
Go

shadow-workers / shadow-workers

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)

service-worker proxy xss-exploitation c2 penetration-testing-tools

Updated Aug 12, 2020
JavaScript

FULLSHADE / WarFox

A proof-of-concept HTTPS beaconing Windows implant and multi-layered proxy C2 network designed for covert APT emulation engagements

windows c2 implant

Updated Feb 16, 2022
C++

PSRansom

JoelGMSec / PSRansom

PowerShell Ransomware Simulator with C2 Server

simulator powershell ransomware c2 psransom

Updated Apr 6, 2022
PowerShell

Improve this page

Add a description, image, and links to the c2 topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the c2 topic, visit your repo's landing page and select "manage topics."