Adversary Emulation Framework
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
Covenant is a collaborative .NET C2 framework for red teamers.
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
Linux-first multi-operator C2 built to stay quiet and keep working. Self-healing mesh with assisted discovery, in-memory execution with encrypted storage, scriptable agents, cross-platform BOFs, SOCKS5 pivoting, and a modular C agent delivered by a sleep-masking stager.
Starkiller is a Frontend for Empire.
渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
DeimosC2 is a Golang command and control framework for post-exploitation.
Some notes and examples for cobalt strike's functionality
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
🕳 godoh - A DNS-over-HTTPS C2
To associate your repository with the c2 topic, visit your repo's landing page and select "manage topics."