venom

Venom C2 Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence, built to run on systems without installing packages. It comprises a Flask team server, an Electron operator GUI, and a single‑file Python agent that communicates over HTTP/HTTPS using configurable...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

RedbloodC2

Public version of Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims installation root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage root@kitploit: After install node.j...

DeimosC2

DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...

khaos-c2

KHAØS C2 KHAØS is a modern post-exploitation C2 framework with 5 covert channels and full evasion built in, created by @28Zaaky. See the documentation for full instructions. Why KHAØS...

SpotifyC2

SpotifyC2 — Cloud-Based Command Channel Research Execute commands through a Spotify playlist and receive command output through Telegram. What is SpotifyC2? SpotifyC2 is a Windows-based cybersecurity research project that demonstrates how publicly accessible cloud services can be used as a...

c2

C2 El repositorio C2 busca proporcionar una implementación práctica de las ideas contenidas en la Red Team Infrastructure Wike en https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki. En particular, este repositorio proporciona dos paquetes de Go: uno para beaconers y otro para...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

trevorc2

trevorc2 TrevorC2 - Comando y Control mediante Comportamiento Legítimo sobre HTTP Escrito por: Dave Kennedy @HackingDave Sitio web: https://www.trustedsec.com Tenga en cuenta que esta es una versión muy temprana; pronto se añadirán gran aleatorización y cifrado. TrevorC2 es un modelo...

GRAT2

GRAT2 C2 root@kitploit: c.-.c c.-.c c.-.c c.-.c c.-.c / .. \ / .. \ / .. \ / .. \ / .. \ \ Y / \ Y / \ Y / \ Y / \ Y / .-/'-'-..-/'-'-..-/'-'-..-/'-'-..-/'-'-. || G || || R || || A || || T || || 2 || .' -' '. .' -' '. .' -' '. .' -' '. .' -' '. .-./-'.-..-./-.-..-./-'.-..-./-'.-..-./-'.-...

DCVC2

Canal de Voz de Discord C2 aka DCVC2 Esta herramienta multiplataforma fue creada para aprovechar los canales de voz de Discord en operaciones de comando y control. Esta herramienta opera completamente sobre el Protocolo en Tiempo Real RTP utilizando principalmente DiscordGo y no deja rastros...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control es una herramienta que permite a los Red Teams desarrollar y utilizar rápidamente canales de comando y control C2 esotéricos. Es un framework que extiende otras herramientas de red team,...

SQLC2

SQLC2 SQLC2 es un script de PowerShell para implementar y gestionar un sistema de comando y control que utiliza SQL Server como servidor de control y agente. En esencia, SQLC2 es solo un script de PowerShell, un script TSQL y unas pocas tablas en una instancia de SQL Server que realiza un...

octohook

octohook Túnel de Web Hooks de Git para C2 Instalación root@kitploit: apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook root@kitploi...

Indushell

Indushell PoC C&C for the Industroyer malware Original work by: xpn https://github.com/xpn Demo: https://www.youtube.com/watch?v=3bulqYmPTps Blog post: https://www.secarma.co.uk/labs/industroyers-command-and-control-protocol...

c2s

C2S Command and Control server on Slack What is C2S? C2S allows you to build a simple Command and Control server using only and only Slack without any extra server or anything. Installation root@kitploit: pip3 install requests The rest of installation focus config on Slack workspace settings so...

MaccaroniC2

MaccaroniC2 - Empowering Command & Control using AsyncSSH MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok...

LDAPFragger

LDAPFragger LDAPFragger is a Command and Control tool that enables attackers to route Cobalt Strike beacon data over LDAP using user attributes. For background information, read the release blog: http://blog.fox-it.com/2020/03/19/ldapfragger-command-and-control-over-ldap-attributes Dependencies a...

GC2-sheet

GC2 GC2 Google Command and Control is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document. Why This project has been developed t...

kubesploit

Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl @Ne0nd0g. Nuestra Motivación Mientras investigábam...