Wei-Shaw / sub2api
Sub2API 一站式开源中转服务，让 Claude、Openai 、Gemini、Grok订阅统一接入，支持拼车共享，更高效分摊成本，原生工具无缝使用。
Wei-Shaw / sub2api
BishopFox / sliver
Adversary Emulation Framework
Ne0nd0g / merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
eksctl-io / eksctl
The official CLI for Amazon EKS
C2SP / wycheproof
Project Wycheproof tests crypto libraries against known attacks.
aws / amazon-ecs-agent
Amazon Elastic Container Service Agent
jm33-m0 / emp3r0r
Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
aws / aws-node-termination-handler
Gracefully handle EC2 instance shutdown within Kubernetes
getprobo / probo
Open source solutions for SOC2, GDPR, and ISO27001
Tylous / SourcePoint
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
MengMengCode / VoCat
Vocat is an open-source web control panel and engineering toolkit for Quectel EC20/EC25-class cellular modems. It combines modem discovery, live radio status, AT and USSD terminals, SMS, WiFi Calling, eSIM management, network selection, proxy routing, notifications, audit logs, and release automation in one self-contained service.
aws / amazon-ssm-agent
An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
C2SP / C2SP
Community Cryptography Specification Project
activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
iQingshan / Toshell
ToShell 是一个轻量 C2 框架，由 服务端（Team Server）+ Web 控制台 + 多平台植入端 组成，覆盖「生成载荷 → 会话管理 → 任务执行」的完整链路。单二进制即可部署整套服务，开箱即用。
ahmadpiran / restoredrill
Proves your PostgreSQL and MySQL backups actually restore, before you find out the hard way.
swordstudiox / vohive-plus
在 windows 跑 WSL linux系统，把大疆 4G 模块（EG25-G）伪装成移远 Quectel EC25 并部署 vohive 平台的项目
VoidSecSoftwares / voidsyscall
Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
Kxiandaoyan / CyberStrikeAI
AI 辅助的授权渗透测试平台（基于 Ed1s0nZ/CyberStrikeAI 二次开发）：单/多智能体交战、本地近5年 CVE 语料与每日增量同步、GitHub-C2 交接、经验总结人审入库、HITL 审批与审计。
kyle41111 / AI-FILE
A listener profile for the Mythic C2 framework that utilizes AI vendors file API's
usepier / pier
Give every agent session its own VM. One command up, zero burn when idle.
zarkones / Piclang
Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for development of red-team implants.