Find C2 beaconing in connection logs: jitter-tolerant interval statistics, explainable score, HTML report. Rust, zero dependencies. - jvch0512/beacon-hunter

CobaltStrike-KunKun (D13Xian) 后门审计存档：原 issue #18 评论被维护者删除后留存的可复现证据 - zipg/CobaltStrike-KunKun-audit

AdaptixC2 是一个基于 Go 服务端 + C++/Qt 客户端的 C2 框架，支持 Windows/Linux/macOS Beacon 管理 - Xaaaa-bip/AdaptixC2Super

A Cobalt Strike 4.12+ User-Defined C2 (UDC2) implementation that tunnels all Beacon traffic through Microsoft Teams TURN relay infrastructure. - c0nf1den71al/turn-udc2

Contribute to Garimaprajapati-bit/c2sink development by creating an account on GitHub.

Offline pcap triage in pure Python: hand-rolled pcap parser plus port-scan, C2 beacon, DNS-tunnel and exfil detection - HisokaDrip/pcapsleuth

**Autonomous AI-Traffic, C2 Beacon & Pre-Compromise Network Threat Hunter** - Yoonas18/OpenC2Hunter

Contribute to ridhima4-ux/c2-beacon development by creating an account on GitHub.

Sliver C2 MCP Server — 104 tools for AI-driven red team ops (Claude Code, Codex). Full session/beacon parity, loot, websites, rportfwd, taskmany. - script000kiddies000/sliver-c2-mcp

Phantom C2 - beacon, file binder, live cam/mic, Docker/Coolify - abdulmanan69/botnt

myC2 beacon is a nontrivial C2 beacon malware application that periodically sends signals to a command and control server. - nickczak/myC2-beacon

Native x86/x64 BOFs for authorized Windows remote execution in Cobalt Strike and Sliver - rubyattack3r/Rex-BOF

C2 pet project. Contribute to seahop/NexusC2 development by creating an account on GitHub.

Unsupervised anomaly detection pipeline for identifying covert C2 beaconing patterns in network flow telemetry. - Simiyuu/c2-beacon-detector

Javalanche is a Command & Control (C2) developed by James Southcott and Danny Nichols for the RITSEC Red Team, meant to be used in Red Vs. Blue style Cybersecurity Competitions for educatio...

Contribute to ammarsabit/C2-Beacon-Detector development by creating an account on GitHub.

Authorised-lab red-team tools (DNS + ICMP C2). Counterpart to plaintext-suite. - DhWonder/redline-suite

Packet-level SIEM in Python/Scapy: C2 beaconing, exfiltration, DGA, scan and tunnel detection with safe iptables containment - alir961/network-siem-c2-detection

Passive C2 and exfiltration detection for packet captures (Go) - hxhBrofessor/c2parser

A SOCKS5 proxy for Cobalt Strike that runs the listener on the operator workstation and routes every connection through the Beacon C2 channel using BOF tasks. No CreateThread, CreateProcess, fork&a...