hinge-command-control-c2

Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

Prismatica

Prismatica In Development Prismatica is a modular C2 Interface hooked into the Diagon Command and Control Toolkit. There are multiple tools and components of the Prismatica Marketplace. All Prism Apps are built around the Emergence Fabric. To get started begin with Emergence Prismatica Applicatio...

Loki

🧙‍♂️ Loki Command & Control Loki is a stage-1 command and control C2 framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application controls by exploiting...

FindObjects-BOF

Este repositorio ha sido movido a nuestro repositorio C2-Tool-Collection...

phpsploit

完全な機能を備えたC2フレームワーク。ポリモーフィックなPHPワンライナーにより、 Webサーバー上に静かに永続化します...

apfell

Apfell Apfell is a JavaScript for Automation JXA payload for macOS. This version currently supports Mythic 2.3.+ and will update as necessary. It will not work with Mythic 2.2 and lower. How to install an agent in this format within Mythic When it's time for you to test out your install or for...

AlanFramework

Alan Framework Alan Framework es un framework de post-explotación útil durante actividades de red team. Si encuentras útil mi herramienta, por favor considerapatrocinarme. ⚠⚠⚠ Descargo de responsabilidad ⚠⚠⚠ La creación de este tipo de software siempre ha causado controversias. Si te preguntas po...

frida-c2-mcp

FridaC2MCP An MCP server with streamable HTTP transport that runs Frida's dynamic instrumentation entirely on-device — no client-side tooling required. This project runs directly on rooted Android and jailbroken iOS devices , exposing Frida as a set of tools callable over HTTP. Any MCP-compatible...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Privacy, Driver & Memory Strings Process Hacker memory analysis of the setup.exe dropper reveals that Lumma Stealer targets privacy settings, installs drivers, and manages memory. Key Strings Observed: Privacy Camera – Attempts to access or disable camera privacy settings. Privacy...

CobaltStrike-Toolset

CobaltStrike-Toolset Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on Kits ResourceKit ExploitKit Aggressor Script chromedumpmimikatz.cna...

Covenant

Covenant es un framework de comando y control para .NET que tiene como objetivo resaltar la superficie de ataque de .NET, facilitar el uso de técnicas ofensivas de .NET y servir como una plataforma colaborativa de comando y control para equipos rojos. Covenant es una aplicación multiplataforma...

maldrolyzer

maldrolyzer Simple framework to extract "actionable" data from Android malware C&Cs, phone numbers etc. Installation You have to install the following packets before you start using this project: Androguard git clone https://github.com/androguard/androguard; cd androguard; sudo python setup.py...

jarm

JARM Por favor, lee la publicación inicial del blog sobre JARM para más información. JARM es una herramienta activa de huellas digitales de servidores de seguridad de la capa de transporte TLS. Las huellas digitales de JARM se pueden usar para: Verificar rápidamente que todos los servidores de un...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

QuickResponseC2

Capacidades - Uso - Demostración - Resumen del flujo de trabajo - TODO QuickResponseC2 QuickResponseC2 es un framework de Comando y Control C2 sigiloso que permite una comunicación indirecta y encubierta entre la máquina atacante y la víctima a través de un servidor HTTP/S intermedio. Toda la...

canisrufus

CanisRufus 一个基于 Python 的 Windows 隐蔽后门，利用 Github 作为命令与控制服务器。 要求 Python 2.x pygithub3 模块 PyCrypto 模块 WMI 模块 Enum34 模块 Netifaces 模块 pypiwin32 模块 功能 加密传输消息 AES + SHA256 哈希 使用系统信息/特征生成计算机唯一 ID SHA256 哈希 任务 ID 为随机 SHA256 哈希 获取系统信息 获取地理位置信息 城市、国家、纬度、经度等 获取正在运行的进程/系统服务/系统用户/设备 硬件 获取客户端列表 执行系统命令 从客户端下载文件...

cnc-relay

cnc-relay Durante un ejercicio de red team es habitual configurar una infraestructura de relays para separar tu superficie de exposición externa del backend real de comando y control. Algunas de las opciones ligeras más populares son configurar HAProxy o NGINX en infraestructura en la nube...

flask_pythonanywhere_redirector

flaskpythonanywhereredirector flask pythonanywhere C2 redirector template Setup 1. Goto: https://www.pythonanywhere.com/ 2. Web Tab - Add new web app - Flask - Python2.7 - next.. 3. scroll down to code - Go to directory - Flaskapp.py 4. Copy and paste code from app.py to file - save top right 5...

glassworm-hunter

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...