c2

Adversary Emulation Framework

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Covenant is a collaborative .NET C2 framework for red teamers.

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

Starkiller is a Frontend for PowerShell Empire.

渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理

DeimosC2 is a Golang command and control framework for post-exploitation.

↕️🤫 Stealth redirector for your red team operation security

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

the c2 programming language

C2 infrastructure over Microsoft Teams.

Windows Remote Administration Tool that uses Discord, Telegram and GitHub as C2s

Android remote administration tool

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Components.

Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

Useful C2 techniques and cheat sheets learned from engagements

C2-下一代RAT

PowerShell Ransomware Simulator with C2 Server