kamalx06 / TornadoC2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.

BishopFox / sliver

Adversary Emulation Framework

spellshift / realm

Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

VoidSecSoftwares / voidsyscall

Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.

HackingLZ / sleepwalker

Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command language.

zarkones / Piclang

Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for development of red-team implants.