Glacier RAT malware analysis: DLL sideloading, DGA C2, WebSocket beacon, AES payload, operator attribution, detection rules - 0x3c4dfa1/glacier-rat

ToShell 是一个轻量 C2 框架，由 服务端（Team Server）+ Web 控制台 + 多平台植入端 组成，覆盖「生成载荷 → 会话管理 → 任务执行」的完整链路。单二进制即可部署整套服务，开箱即用。 - iQingshan/Toshell

Corporate XDR/EDR/MDM + SOC endpoint security platform in Go; agent-to-C2 over gRPC + mTLS (TLS 1.3). Kurumsal uc nokta guvenlik platformu. - cihanuralkaya/Kut-Security-Suit

Cloud dead-drop C2 channel plugin for Adaptix C2 v1.2. - stillbigjosh/adaptix-graph-c2

Contribute to 0xCellSec/C2-Beacon development by creating an account on GitHub.

Contribute to 9018/c2-all development by creating an account on GitHub.

Contribute to Kumari-Divya-Rashmi/encrypted-c2-quic-prevention development by creating an account on GitHub.

Contribute to melancholyj1/c2-beacon development by creating an account on GitHub.

Dependency Confusion C2. Contribute to js-recon/dolus development by creating an account on GitHub.

Finding periodic C2 beacons in network timing with a Rayleigh phase-coherence test — and measuring honestly why periodicity alone cannot separate a beacon from NTP. - blurxy/beacon-spectrum

Small python server, asyncio and aiosqlite. Simple C2 Beacon implementation. - Wleve/C2Beacon

WorldC2 — Enterprise Command & Control Platform. Go backend + Vue 3 dashboard + multi-platform agents. Encrypted tunnels, SOCKS5 proxy, WebRTC, real-time telemetry. - Ruby570bocadito/WorldC2

Stealth focused DNS C2 with Shadow Mesh architecture and malleable timing and payloads for Adversary Emulation. - abb3rrant/Unkn0wnC2

Contribute to guguguc/c2 development by creating an account on GitHub.

rogue botnet w/ advanced c2 and extensive payload repo (RAT) - ekomsSavior/rogue

Contribute to cyber-atharv/c2-beacon development by creating an account on GitHub.

Multi-signal C2 beacon detector. Correlates Zeek conn.log, dns.log, and ssl.log to score and rank beacon candidates with per-signal breakdowns and ATT&CK mapping. - 0xPersist/beacon-score

Contribute to chryzsh/docker-cobaltstrike development by creating an account on GitHub.

Contribute to stuxve/caraxes-c2 development by creating an account on GitHub.

Python-based network security labs covering ARP MITM, DNS poisoning, C2 beacon simulation, TCP port scanning, banner grabbing, and defensive analysis. - mtharland/Network_Security.250.Red-team