Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
-
Updated
Nov 25, 2020 - Go
#
c2
Here are 79 public repositories matching this topic...
Covenant is a collaborative .NET C2 framework for red teamers.
-
Updated
Nov 19, 2020 - C#
Implant framework
golang
http
dns-server
red-team
security-tools
c2
red-team-engagement
command-and-control
implant
red-teaming
-
Updated
Dec 2, 2020 - Go
nil0x42
commented
Oct 3, 2020
Current implementation of proclist plugin uses win32_ps_list_procs() php function on Windows host.
Therefore, linux implementation is a simple system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.
A better implementation should avoid relying on system command execution.
RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.
rat
malware-analysis
c2
command-and-control
remote-access-tool
remote-administration-tool
command-control
rat-analysis
rat-malware
-
Updated
Feb 17, 2020
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
-
Updated
Dec 2, 2020 - PowerShell
Open source pre-operation C2 server based on python and powershell
-
Updated
Oct 23, 2020 - Python
A Golang implant that uses Slack as a command and control server
python
golang
penetration-testing
pentest
red-team
remote-admin-tool
c2
command-and-control
penetration-testing-tools
-
Updated
Oct 10, 2019 - Python
-
Updated
May 17, 2020 - Go
DeimosC2 is a Golang command and control framework for post-exploitation.
-
Updated
Oct 14, 2020 - Vue
Starkiller is a Frontend for PowerShell Empire.
-
Updated
Nov 25, 2020 - Vue
[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.
osint
anti-virus
password
owasp
vulnerability
recon
post-exploitation
burp
pentest
payload
privilege-escalation
iot-security
kali
cobalt-strike
social-engineering-attacks
metasploit
data-exfiltration
c2
wifi-hacking
threat-hunt
-
Updated
Dec 23, 2019
FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
security
powershell
python3
cybersecurity
post-exploitation
offensive-security
security-tools
c2
command-and-control
redteam
implant
purpleteam
readteaming
-
Updated
Oct 27, 2020 - Python
Responsive Command and Control System
-
Updated
Jul 28, 2020 - HTML
Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
-
Updated
Aug 12, 2020 - JavaScript
Cyberdelia, a Collection of Command and Control frameworks
-
Updated
Oct 16, 2019 - Shell
Some notes and examples for cobalt strike's functionality
-
Updated
Nov 14, 2020
Check Domain Fronting (chkdfront) - It checks if your domain fronting is working
-
Updated
Apr 3, 2019 - Ruby
AV-evading Pythonic Reverse Shell with Dynamic Adaption Capabilities
python
encoding
obfuscation
encryption
hacking
penetration-testing
rat
pentesting
reverseshell
oscp
c2
command-and-control
oscp-tools
-
Updated
Jun 7, 2020 - Python
Login Pages Database forms a knowledge base on login pages related to malicious activities (C2 panels, phishing kits...).
-
Updated
Dec 1, 2020 - Vue
Command Line RAT that uses Gmail as its central C2Server. Bypassing common issues, such as the need for port forwarding or proxies.
python
information-retrieval
remote-control
command-line
rat
remote-admin-tool
c2c
c2
reconnaissance
malicious-process
-
Updated
Oct 29, 2020 - Python
Discord C2 for Redteam....Need a better name
-
Updated
May 21, 2020 - Go
A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
-
Updated
Jun 24, 2020 - PowerShell
Improve this page
Add a description, image, and links to the c2 topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the c2 topic, visit your repo's landing page and select "manage topics."
Empire Version
OS Information (Linux flavor, Python version)
Describe the bug
All four RESTful API end points listed at https://github.com/BC-SECURITY/Empire/wiki/RESTful-API#admin-functionality have incorrect handlers. The handler should be: GET /api/admin/[endpoint].
To Reproduce
Steps to reproduce the behavior: