Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

c2s

C2S Command and Control server on Slack What is C2S? C2S allows you to build a simple Command and Control server using only and only Slack without any extra server or anything. Installation pip3 install requests The rest of installation focus config on Slack workspace settings so please follow th...

flask_pythonanywhere_redirector

flaskpythonanywhereredirector flask pythonanywhere C2 redirector template Setup 1. Goto: https://www.pythonanywhere.com/ 2. Web Tab - Add new web app - Flask - Python2.7 - next.. 3. scroll down to code - Go to directory - Flaskapp.py 4. Copy and paste code from app.py to file - save top right 5...

Social-media-c2

Command and control servers in social media Script is a proof of concept how to control your machine by using social media platforms. Description and usage Script has following functions: history - ReTweet history, like photo on Instagram with 'history' in description or wrote 'history' to...

SQLC2

SQLC2 SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent. At its core, SQLC2 is just a PowerShell script, a TSQL script, and a few tables in an SQL Server instance that tracks agents, commands, and...

DeimosC2

DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...

apfell-chrome-extension-c2server

apfell-chrome-extension-c2server Apfell C2 Server for the Google Chrome Extension Payload Find the latest version of the chrome extension C2 server in the Apfell framework here: https://github.com/its-a-feature/Apfell...

dnscat2

REMARQUE : Les mots de passe pour les téléchargements .zip sont tous "password" ! Introduction Bienvenue sur dnscat2, un tunnel DNS qui NE vous rendra PAS malade et ne vous tuera pas ! Cet outil est conçu pour créer un canal de commande et contrôle C&C chiffré via le protocole DNS, qui constitue ...

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

trevorc2

trevorc2 TrevorC2 - Commandement et Contrôle via un Comportement Légitime sur HTTP Écrit par : Dave Kennedy @HackingDave Site Web : https://www.trustedsec.com Notez qu'il s'agit d'une version très précoce - une forte randomisation et un chiffrement seront bientôt ajoutés. TrevorC2 est un modèle...

Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

C2-Pwn

C2-Pwn Uses Shodan API to pull down C2 servers to run known exploits on them. Requires shodan account for API. https://www.shodan.io/ Rat Exploit Support Dark Comet Remote File Download https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat buffer Overflow...

Empire

Empire Empire — это фреймворк для постэксплуатации и эмуляции противника, используемый для помощи Red Teams и пентестерам. Сервер Empire написан на Python 3 и является модульным, что обеспечивает гибкость для оператора. Empire поставляется со встроенным клиентом, который можно использовать удалён...

RedbloodC2

Public version of Redblood C2 This is a simple command and control server to handle sessions and your victims installation $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage After install node.js and and all modules from npm execute: node...

wikipedia-c2

Wikipedia-C2 위키피디아 C2 블로그 포스트 이것은 위키피디아를 활용한 명령 및 제어C2를 시연하는 데모 프로젝트입니다. Josh Abraham의 Slack과 ICMP를 이용한 C2 데모를 본 후, 인터넷 상위 사이트들 중 C2에 사용할 수 있는 다른 옵션이 무엇이 있을지 탐구해 보았습니다. 위키피디아 API를 검토한 후, user-jsarbitraryKeyName이라는 사용자 옵션이 "임의의 값"을 가질 수 있다는 것을 알게 되었습니다. 나중에 최대 길이가 65535자라는 것을 발견했는데, 이는 C2에 충분한...

shadow-workers

Shadow Workers Info Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers SW. A successful exploitation allows you to browse on the targeted application as the victims, as long as the SW agent is...

Reverse_DNS_Shell

DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...

c2

C2 The C2 repository seeks to provide a practical implementation of the ideas contained in the Red Team Infrastructure Wike at https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki. In particular, this repository provides two Go packages one for beaconers and another for downloaders. In...

MaccaroniC2

MaccaroniC2 - Empowering Command & Control using AsyncSSH MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok...