sak1to-shell

sak1to-shell Многопоточный, мульти-ОС/платформа Linux/Windows c2 сервер и Windows reverse TCP shell клиент, оба написаны на C. Компиляция reverse TCP shell клиента с i686-w64-mingw32-gcc: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s...

sak1to-shell

sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s...

FindObjects-BOF

This repository has been moved to our C2-Tool-Collection repository...

C2-Hunter

C2-Hunter C2-Hunter — это программа, предназначенная для специалистов по анализу вредоносного ПО для извлечения трафика Command and Control C2 из вредоносных программ в реальном времени. Программа использует уникальный подход, перехватывая API-функции соединений win32. С помощью C2-Hunter аналити...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control, использующий Microsoft Graph API для C2-коммуникаций и эксфильтрации данных. Удалённое управление скомпрометированным устройством Windows через ваш почтовый ящик Outlook. Создатели: Bobby Cooke @0xBoku и Paul Ungur @C5pider Обновление CTI-угроз...

DDOS-RootSec

RootSec Archive Overview of RootSec Archive Welcome to the RootSec Archive , your ultimate resource for DDOS tools, scanners, botnets, exploits, and more. Our archive includes: Mirai Edits: Private and Public Versions QBot Edits: Private and Public Versions Other Botnet Variants: Diverse...

DNS-Persist

DNS-Persist DNS-Persist is a post-exploitation agent which uses DNS for command and control. The server-side code is in Python and the agent is coded in C++. This is the first version, more features and improvements will be made in the future. Getting Started Author 0x09AL -...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

Burp2Malleable

Burp2Malleable Burp Suite의 HTTP 요청을 Cobalt Strike Malleable C2 프로필로 변환하기 위해 제가 작성한 빠른 파이썬 유틸리티입니다. 트래픽이 어떻게 보이기를 원하는지/어떤 것과 섞이기를 원하는지에 따라 BurpSuite또는 ZAP, POSTMAN 등에서 캡처하거나 직접 만든 요청을 가져와 CobaltStrike Malleable C2 프로필로 변환할 수 있습니다. 운영자는 데이터가 저장될 위치와 형식을 선택할 수 있으므로 트래픽이 최대한 자연스럽게 보입니다. 기능 요청이나 버그 등에...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

grc2

nimc2 Это программное обеспечение находится на очень ранней стадии разработки, и при его использовании вы можете столкнуться со многими проблемами. nimc2 — это очень легковесный C2, написанный полностью на nim. Его применение варьируется от поддержки пользователей до мониторинга сотрудников. Если...

flask_pythonanywhere_redirector

flaskpythonanywhereredirector flask pythonanywhere C2 redirector template Setup 1. Goto: https://www.pythonanywhere.com/ 2. Web Tab - Add new web app - Flask - Python2.7 - next.. 3. scroll down to code - Go to directory - Flaskapp.py 4. Copy and paste code from app.py to file - save top right 5...

GodGenesis

Welcome To God Genesis God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any targeted WINDOWS Machine. The List Of Commands It Supports :-...

Cuteit

Cuteit IP obfuscator made to make a malicious ip a bit cuter 😄 A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. Al...

RedditC2

RedditC2 Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit. 🚫 Disclaimer: Use of this project is for Educational/ Testing purposes only. Using it on unauthorised machines is strictly forbidden. If...

ReverseTCPShell

ReverseTCP Shell Framework root@kitploit: | \ | / | \ / | | | | | | | | | | | | | | | | | | | || | | | | | // \ \ / / \ '/ |/ \ | | | | / \ | |/ \ | | | | \ \ /\ V / / | \ \ / | | || | | | | | / | | || \| / || |/|| || |/|| ||||| - By: @ZHacker13 - | Modules | - Show C2-Server Modules. - |...

AtlasC2

AtlasC2 C C2 Framework centered around Stage 1 operations Atlas is based around gaining a foothold within an environment and further utilizing it to smuggle in C currently strictly C weaponry utilizing an HTTP based implant. Isn't exactly very OPSEC safe in it's current state...at all. Currently...

lldp

lldp IEEE 802.1AB（LLDP）を介したピアツーピア通信用の Mythic C2 プロファイル。C2 データは、設定可能な OUI を持つ Organizationally Specific TLV（タイプ 127）内に格納され、フレームがネットワーク上でベンダー固有の LLDP 拡張に紛れるようにします。 LLDP はレイヤー 2 のみです。両方のエージェントが同じブロードキャストドメインを共有している必要があります。egress エージェント（HTTP/HTTPX）は、SMB および TCP P2P プロファイルと同様に、LLDP でリンクされたエージェントを Myth...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest For InfoSec work, using HTTPS is an incredibly handy mechanism for C2 and maneuver within target network space. Further PowerShell is an amazing productivity tool that can help an operator achieve dynamic results. A natural next conclusion is to combine the C2 channel...

shad0w

SHAD0W SHAD0W — это модульная C2-инфраструктура, предназначенная для успешной работы в зрелых средах. Он использует ряд методов для обхода EDR и AV, позволяя оператору продолжать использовать привычные инструменты и методы. Он работает на Python 3.8 и C и использует Donut для генерации полезной...