BishopFox / sliver
Adversary Emulation Framework
BishopFox / sliver
S3N4T0R-0X0 / BEAR-C2
BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.
firehol / blocklist-ipsets
ipsets dynamically updated with firehol's update-ipsets.sh script
stillbigjosh / adaptix-serverless-c2
Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
Ne0nd0g / merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
g13net / lockjaw
Rust based C2 Framework
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.