JS-Tap

JS-Tap v3.0.4 This tool is intended to be used on systems you are authorized to attack and for legal and educational purposes. Do not use this tool for illegal purposes, or I will be very angry in your general direction. Changelogs Major changes are documented in the project Announcements:...

PSRansom

PSRansom PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

sak1to-shell

sak1to-shell Servidor c2 multi-hilo, multi-sistema/plataforma Linux/Windows y cliente de shell TCP inversa para Windows, ambos escritos en C. Compilando el cliente de shell TCP inversa con i686-w64-mingw32-gcc: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o...

sak1to-shell

sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s...

caldera

Caldera™ Caldera™ is a cyber security platform designed to easily automate adversary emulation, assist manual red-teams, and automate incident response. It is built on the MITRE ATT&CK™ framework and is an active research project at MITRE. The framework consists of two components: 1. The core...

byob

¿Preguntas? Consulta la documentación o únete a nuestro servidor de soporte en Discord Descargo de responsabilidad : Este proyecto debe ser utilizado solo para pruebas autorizadas o fines educativos. BYOB es un framework de post-explotación de código abierto para estudiantes, investigadores y...

Octopus

¿Qué es Octopus? Octopus es un servidor C2 de preoperación de código abierto basado en Python que puede controlar un agente de Octopus PowerShell a través de HTTP/S. El propósito principal de crear Octopus es usarlo antes de cualquier operación de red team, donde en lugar de comenzar el compromis...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

gmailc2

gmailc2 root@kitploit: Un servidor C2 completamente indetectable que se comunica a través de Google SMTP para evadir protecciones antivirus y restricciones de tráfico de red. Nota: root@kitploit: Este RAT se comunica a través de Gmail SMTP o puedes usar cualquier otro SMTP también, pero Gmail SMT...

GodGenesis

Welcome To God Genesis God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any targeted WINDOWS Machine. The List Of Commands It Supports :-...

merlin

Merlin Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go. Highlighted features: merlin-cli command line interface over gRPC to connect to the Merlin Server facilitating multi-user support...

apfell-chrome-extension-c2server

apfell-chrome-extension-c2server Apfell C2 Server for the Google Chrome Extension Payload Find the latest version of the chrome extension C2 server in the Apfell framework here: https://github.com/its-a-feature/Apfell...

BabyShark

INTRO This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which uses Google Translator as a proxy for sending commands to the infected host. The BabyShark project aims to centralize reverse connections with agents, creating a way to centralize several...

SOC335-CVE-2024-49138-Exploitation-Detected

SOC335 - Exploitation of CVE-2024-49138 Detected About This was one of the SOC lab exercises that I took on LetsDefend. The alert was about CVE-2024-49138. I investigated the alert, checked a suspicious hash on VirusTotal and searched the available logs for related activity. What I Did Investigat...

erl_mouse

erlmouse version 1.1 Alright, I've improved several things to increase chances of finding a vulnerable device or network. Most are not public facing, have been patched, or are so oscure that it can be difficult to find a target. Nevertheless, we persist. You can now scan every IP address in china...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

hinge-command-control-c2

Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...

CVE-2024-23700-C2-Server

CVE-2024-23700 - C2 Server: Command and Control and Data Collection Server This project illustrates the design and construction of a Command & Control C2 server used for the experimental exploitation scenario of the privilege escalation vulnerability CVE-2024-23700. This server is responsible for...

CVE-2026-92748 BC Security Empire before 6.7.1 Path Traversal File Upload RCE

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...