1440 matches found
CVE-2024-23700-C2-Server
CVE-2024-23700 - C2 Server: Command and Control and Data Collection Server This project illustrates the design and construction of a Command & Control C2 server used for the experimental exploitation scenario of the privilege escalation vulnerability CVE-2024-23700. This server is responsible for...
joro
Joro A web exploitation framework for offensive security professionals. Intercepting proxy, blind vulnerability detection, web shell generation, C2 integration, and collaboration tools in a single binary with an embedded web UI. Warning: This tool is intended for authorized penetration testing an...
shad0w
SHAD0W SHAD0W es un framework C2 modular diseñado para operar con éxito en entornos maduros. Utiliza una variedad de métodos para evadir EDR y AV, permitiendo al operador seguir usando las herramientas y técnicas que conoce. Está impulsado por Python 3.8 y C, y usa Donut para la generación de...
C3
C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control is a tool that allows Red Teams to rapidly develop and utilise esoteric command and control channels C2. It's a framework that extends other red team tooling, such as the commercial Cobal...
redxor
C2 de malware Linux 'RedXOR': un ejemplo de detección Este paquete sirve como demostración de cómo se puede usar Zeek para detectar la puerta trasera de Linux "redXOR" mediante métodos basados en estado. Referencias: Blog de Corelight...
ibombshell
ibombshell - Dynamic Remote Shell root@kitploit: ,--.!, / -- / / / // / / / / ,d08b. '| / / / / / \ / / / / / 0088MM / / // / // / / / / / / // // / / / / / / / 9MMP' ///// // //./// ///// + Starting the console... Console ready! ibombshell is a tool written in Powershell that allows you to...
zeek-spicy-facefish
FacefishRootkit This Zeek+Spicy analyzer will detect the Facefish Linux rootkit C2 as described in: https://blog.netlab.360.com/sshstealerfacefishen/ https://blogs.juniper.net/en-us/threat-research/linux-servers-hijacked-to-implant-ssh-backdoor...
C2Bridge
C2Bridge 使开发人员能够创建新的自定义通信协议，并在 Covenant 中快速使用它们。 C2Bridges C2Bridge 用于开发出站命令与控制协议，而无需编辑任何 Covenant 代码。对于习惯于集成新监听器的开发人员来说，新的 C2 协议应作为一等公民的新监听器类型添加，并完全集成到界面中。然而，在某些情况下，在 Covenant 之外创建 C2Bridge，并将其与 BridgeListener 连接用于概念验证或测试新协议，可能会更快。 开发人员可以使用 C2Bridge 项目作为创建新 C2Bridge 的模板。在 C2Bridge 项目中，有一个抽象...
RemoteRecon
RemoteRecon Remote Recon and Collection RemoteRecon provides the ability to execute post-exploitation capabilities against a remote host, without having to expose your complete toolkit/agent. Often times as operator's we need to compromise a host, just so we can keylog or screenshot or some other...
Prismatica
Prismatica In Development Prismatica is a modular C2 Interface hooked into the Diagon Command and Control Toolkit. There are multiple tools and components of the Prismatica Marketplace. All Prism Apps are built around the Emergence Fabric. To get started begin with Emergence Prismatica Applicatio...
Loki
🧙♂️ Loki Command & Control Loki is a stage-1 command and control C2 framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application controls by exploiting...
FindObjects-BOF
This repository has been moved to our C2-Tool-Collection repository...
phpsploit
完全な機能を備えたC2フレームワーク。ポリモーフィックなPHPワンライナーにより、 Webサーバー上に静かに永続化します...
apfell
Apfell Apfell is a JavaScript for Automation JXA payload for macOS. This version currently supports Mythic 2.3.+ and will update as necessary. It will not work with Mythic 2.2 and lower. How to install an agent in this format within Mythic When it's time for you to test out your install or for...
AlanFramework
Alan Framework Alan Framework is a post-exploitation framework useful during red-team activities. If you find my tool useful, please consider tosponsor me. ⚠⚠⚠ Disclaimer ⚠⚠⚠ The creation of this kind of software has always caused controversies. If you're wondering why I decided to create this...
Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis
1. Setup.exe – Privacy, Driver & Memory Strings Process Hacker memory analysis of the setup.exe dropper reveals that Lumma Stealer targets privacy settings, installs drivers, and manages memory. Key Strings Observed: Privacy Camera – Attempts to access or disable camera privacy settings. Privacy...
CobaltStrike-Toolset
CobaltStrike-Toolset Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on Kits ResourceKit ExploitKit Aggressor Script chromedumpmimikatz.cna...
Covenant
Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...
maldrolyzer
maldrolyzer Simple framework to extract "actionable" data from Android malware C&Cs, phone numbers etc. Installation You have to install the following packets before you start using this project: Androguard git clone https://github.com/androguard/androguard; cd androguard; sudo python setup.py...