Multi-protocol C2 beacon with Telegram integration and DNS exfiltration for authorized security testing - wsuits6/phantom-strike

BOF Process Hollowing - "The Ghost Injector". Contribute to wanmywan/BOF-Sliver-ProccessHollowing development by creating an account on GitHub.

Capstone 2 — Behavioral Detection of Hidden DNS/HTTPS C2 Using UEBA and Multi-Indicator Analysis. All 7 phases (0-6) complete; deployed end-to-end (Zeek/Suricata/ES/Kibana). Result C>B&g...

DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack path over OpenVPN. - BaddKharma/redStack-defcon34

Custom Suricata detection rule built and tested against a NetSupport RAT C2 beacon PCAP — from manual traffic analysis to automated detection. - gowtham526/NetSupport-RAT-Suricata-Detection

Telegram Bot C2 RAT. Contribute to Adhi-hub07/Nexus-Telegram-C2 development by creating an account on GitHub.

Zeek package for behavioral detection of SSL/TLS C2s - kevross33/zeek-c2-detection-ssl

Teardown of a Warzone/AveMaria RAT: static triage, dynamic analysis, C2 hunting, IDA reverse engineering of the keylogger, and reconstructing the maldoc dropper down to the deobfuscated PowerShell....

RedHawk — Offensive red teaming suite for Windows (Electron + React + Tailwind) - srivanththeattack/redhawk

Network forensics case study: Hancitor malspam to Cobalt Strike infection. Includes evidence pcap, chain of custody, and full analysis write-up. For educational/training use. - Kassim20056/hancitor...

Talon — Kernel-level mini EDR detecting DKOM hidden modules, syscall table hooks, ptrace injection, and C2 beacon patterns via kallsyms + kprobes + netlink. Built as the defensive counterpart to Ti...

Detecting malware C2 traffic using network metadata and beacon analysis - Imteyaz-git/malware-c2-traffic-classifier

Statistical C2 beacon detection engine — robust time-series analysis, composite scoring and graph-based campaign correlation, evaluated on CTU-13 (Zeek/NetFlow) - yigit006/heartbeat-hunter

A malware traffic analysis investigation of a NetSupport RAT infection using Wireshark, including IOC identification, C2 analysis, and incident documentation. - nzubeio/netsupport-rat-analysis

Cobalt Strike beacon metadata analysis using K-Modes clustering for defensive threat detection research. - clivoa/cobaltstrikekmodes

Red team infrastructure automation — sanitized portfolio version - n0mad1k/c2itall

Elite Red Team Adversary Simulation & C2 Framework | Heavy Evasion | Encrypted Beacon | Production Ready - ITherso/monolith-test

Contribute to terancebana/chimera-c2 development by creating an account on GitHub.

A stealthy C2 agent for advanced red team operations, featuring indirect syscalls, memory/stack obfuscation, and HTTPS communication. - daoquynhthu/redteam_agent

Cobalt Strike BOF to obtain location data. Contribute to CodeXTF2/GeoLocation_BOF development by creating an account on GitHub.