link

link link — это фреймворк для управления и контроля C2, написанный на Rust. В настоящее время находится на стадии бета. Содержание Введение Возможности Обратная связь Сборка Благодарности Введение...

phpsploit

Framework C2 complet qui persiste silencieusement sur un serveur web via un oneliner PHP polymorphe...

merlin

Merlin Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go. Highlighted features: merlin-cli command line interface over gRPC to connect to the Merlin Server facilitating multi-user support...

Octopus

What is Octopus ? Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational...

pwncat

pwncat pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. pwncat used to only support Linux, b...

antnium

Antnium root@kitploit: Anti Tanium A C2 framework and RAT written in Go. This source code is publicly published as reference for my presentation Develop your own RAT - AV & EDR Defense. Antnium inteded to fulfill my own requirements, and not those of others. Works for the campaigns i performed, b...

meterpeter

Author: @r00t-3xp10it Version release: v2.10.14 Distros Supported: Windows x86|x64, Linux Inspired in the work of: '@ZHacker13 - ReverseTCPShell' :octocat: Quick Jump List Project Description List Of Available Modules Meterpeter C2 Latest Release How To - Under Linux Distributions How To - Under...

SourcePoint

SourcePoint SourcePoint is a polymorphic C2 profile generator for Cobalt Strike C2s, written in Go. SourcePoint allows unique C2 profiles to be generated on the fly that helps reduce our Indicators of Compromise "IoCs" and allows the operator to spin up complex profiles with minimal effort. This...

CVE-2024-28741-northstar-agent-rce-poc

NorthStar C2: RCE агента через хранимый XSS PoC эксплуатации RCE агента для CVE-2024-28741, уязвимости хранимого XSS в NorthStar C2. Этот эксплойт работает путём отправки нескольких вредоносных запросов на регистрацию агента на сервер команды teamserver, чтобы поэтапно собрать работающую...

POC_CVE-2025-32433

⚠️ Avertissement éthique Ce dépôt contient du code qui démontre une véritable CVE CVE-2025-32433. Utilisez-le uniquement dans des environnements où vous avez une autorisation explicite. Ne testez jamais cette exploitation contre des systèmes que vous ne possédez ou ne gérez pas. Une utilisation no...

sak1to-shell

sak1to-shell Serveur C2 multi-threadé, multi-OS/plateforme Linux/Windows et client Windows reverse TCP shell, tous deux écrits en C. Compilation du client reverse TCP shell avec i686-w64-mingw32-gcc: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o...

sak1to-shell

sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: root@kitploit: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s...

FindObjects-BOF

Этот репозиторий был перенесён в наш репозиторий C2-Tool-Collection...

C2-Tool-Collection

Outflank - C2 Tool Collection This repository contains a collection of tools which integrate with Cobalt Strike and possibly other C2 frameworks through BOF and reflective DLL loading techniques. These tools are not part of our commercial OST product and are written with the goal of contributing ...

C2-Hunter

C2-Hunter C2-Hunter — это программа, предназначенная для специалистов по анализу вредоносного ПО для извлечения трафика Command and Control C2 из вредоносных программ в реальном времени. Программа использует уникальный подход, перехватывая API-функции соединений win32. С помощью C2-Hunter аналити...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

DDOS-RootSec

RootSec Archive Overview of RootSec Archive Welcome to the RootSec Archive , your ultimate resource for DDOS tools, scanners, botnets, exploits, and more. Our archive includes: Mirai Edits: Private and Public Versions QBot Edits: Private and Public Versions Other Botnet Variants: Diverse...

DNS-Persist

DNS-Persist DNS-Persist is a post-exploitation agent which uses DNS for command and control. The server-side code is in Python and the agent is coded in C++. This is the first version, more features and improvements will be made in the future. Getting Started Author 0x09AL -...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

Burp2Malleable

Burp2Malleable Небольшая python-утилита, которую я написал для преобразования HTTP-запросов из Burp Suite в Malleable C2 профили Cobalt Strike. Она позволяет брать перехваченные/созданные вручную запросы из BurpSuite или ZAP, POSTMAN и т.д., описывающие, как должен выглядеть ваш трафик и с чем он...