Adversary Emulation Framework

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

一个攻防知识库。A knowledge base for red teaming and offensive security.

ipsets dynamically updated with firehol's update-ipsets.sh script

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

C2/post-exploitation framework

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

🕳 godoh - A DNS-over-HTTPS C2

C2 infrastructure over Microsoft Teams.

BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

Windows Remote Administration Tool that uses Discord, Telegram and GitHub as C2s

Android remote administration tool

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document.

link is a command and control framework written in rust

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

Decentralized C2 framework built on libp2p

A Golang implant that uses Slack as a command and control server