Proof-of-concept command and control (C2) framework demonstrating domain fronting and DNS tunneling evasion techniques. - ericust1/covert-c2-framework-poc

Zombieland is a command and control (C2) server designed to manage and communicate multiple client machines (referred to as "zombies"). Encrypted communication with clients, all...

Triage and forensic analysis of a high-severity network alert indicating a Lumma Stealer infection. This investigation covers identifying the compromised internal asset, mapping its Active Director...

A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing on the open-source Empire C2 framework. - BC-SECURITY/Long-...

This reverse shell is a lightweight Python script that connects back to a netcat listener, giving the attacker remote command execution on the target machine. It's built for educational use...

Kapital C2 - a local C2 lab: trojanized npm package, beaconing agent, and operator console for controlling test victims - aykhan019/kc2

C2 Frameworks & Post-extensionation – A comprehensive suite for managing command and control operations with multi-framework support and advanced post-extensionation modules for Windows. - ...

Modular command and control for redteam operations. - farinap5/PurpleCommand

Contribute to AltaXploit/AltaXploit-C2 development by creating an account on GitHub.

Incident response investigation of a compromised Windows endpoint. Reconstructed the full attack chain using Sysmon logs, Windows Event Logs, and network packet capture covering initial access, ...

C2 Frameworks & Post-extensionation – Advanced command and control suite with multi-framework support and undetectable features. - occurred2464-indorsed/Covenant-C2-Advanced-Suite

SockPuppets - WebSocket-based command and control. Not a good C2. - ajm4n/sockpuppets

Contribute to Luckyluc321/ISR-Systems-c2-platform development by creating an account on GitHub.

Janus is a secure command and control server featuring built-in TLS encryption for safe remote operations. - 0xbad4/janus-c2

Teardown of a Warzone/AveMaria RAT: static triage, dynamic analysis, C2 hunting, IDA reverse engineering of the keylogger, and reconstructing the maldoc dropper down to the deobfuscated PowerShell....

VoidWalker is an elite penetration testing arsenal builder that transforms Ubuntu/Debian systems into comprehensive security environments. This Python tool features a cyberpunk terminal interface a...

A malware traffic analysis investigation of a NetSupport RAT infection using Wireshark, including IOC identification, C2 analysis, and incident documentation. - nzubeio/netsupport-rat-analysis

A Command and Control Framework to be released for Ubuntu 20.04/22.04 - itsnold/Nagomio-C2

C2-style Zero-Trust forum secured via client-side ECDSA P-256 signatures, non-extractable IndexedDB keys, PoW, and dynamic SVG CAPTCHAs. - Noir0x63/Command-Control-Forum

Simulated endpoint compromise involving a command and control (C2) attack scenario where a malicious payload is executed on a victim machine. Detection and investigation are performed using LimaCha...