SOC lab for high-fidelity threat hunting: detects Sliver C2 beacons via Zeek/Suricata, handles fileless LotL attacks with ELK/Sigma, deploys Python-Volatility for memory forensics, tracks DNS/ICMP ...

Windows C++ implant with direct syscalls and Python C2 server for authorized security testing - wsuits6/PHANTOM-C2v2.0

Multi-protocol C2 beacon with Telegram integration and DNS exfiltration for authorized security testing - wsuits6/phantom-strike

Contribute to Luckyluc321/ISR-Systems-c2-platform development by creating an account on GitHub.

Emulating and detecting advanced mTLS C2 beaconing using Sliver, Wireshark, and Sysinternals. - ayushkp930/Enterprise-C2-Detection-Lab

BOF Process Hollowing - "The Ghost Injector". Contribute to wanmywan/BOF-Sliver-ProccessHollowing development by creating an account on GitHub.

Full red team engagement — Sliver C2, BloodHound AD enumeration, SYSTEM escalation, corp.local domain compromise - rithika-ujjalsingh/Full-Red-Team-C2-Infrastructure

Contribute to arindam-banerjee-2021/nd073-c2-Dental-Office-Virtual-Assistant development by creating an account on GitHub.

TheDarkMark is a C2 framework designed to be fast and parallel. - Yyax13/TheDarkMark

Red Team hardware implant — RPi4/CM4 inline Ethernet tap with PoE, dual cover identities (Cisco Phone / HP Printer), 802.1X NAC bypass, and Sliver C2 - BenjiTrapp/TrashPandaPaws

Capstone 2 — Behavioral Detection of Hidden DNS/HTTPS C2 Using UEBA and Multi-Indicator Analysis. All 7 phases (0-6) complete; deployed end-to-end (Zeek/Suricata/ES/Kibana). Result C>B&g...

A C2 Framework (for proof of concept). Contribute to ebx32/higgsc2 development by creating an account on GitHub.

DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack path over OpenVPN. - BaddKharma/redStack-defcon34

Janus is a secure command and control server featuring built-in TLS encryption for safe remote operations. - 0xbad4/janus-c2

Open-source threat intelligence console. Aggregates live CVEs (NVD), CISA KEV, EPSS exploit scores, abuse.ch IOCs, active C2 servers on a global map, data breaches, and infosec news into one dark-...

ToxNetV2 C2 framework with bot_stub scanner. Contribute to dsagt315fgvds/ToxNetV2 development by creating an account on GitHub.

Official MCP server for Threadlinqs Intelligence — 49 tools for threat intel, detections, IOCs, actors, C2, MITRE chains, and CVE/CWE. npm: intelthreadlinqs-mcp - threadlinqs-cmd/intelthreadlinqs-mcp

Custom Suricata detection rule built and tested against a NetSupport RAT C2 beacon PCAP — from manual traffic analysis to automated detection. - gowtham526/NetSupport-RAT-Suricata-Detection

Contribute to S8C88/C2-Framework-Lite development by creating an account on GitHub.

Advanced RAT Framework — Telegram C2, Encrypted C2, Defender Bypass, Keylogger, Surveillance, Persistence - Adhi-hub07/Nexus-RAT-Framework