Adversary Emulation Framework

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Covenant is a collaborative .NET C2 framework for red teamers.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

A post exploitation framework designed to operate covertly on heavily monitored environments

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Starkiller is a Frontend for PowerShell Empire.

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

DeimosC2 is a Golang command and control framework for post-exploitation.

Some notes and examples for cobalt strike's functionality

一款支持多人协作的渗透测试图形化框架、支持lua插件扩展、域前置/CDN上线、自定义多个模块、自定义shellcode、文件管理、进程管理、内存加载、反向代理等功能

牛屎花 一款基于WEB界面的远程主机管理工具

🕳 godoh - A DNS-over-HTTPS C2

Open source pre-operation C2 server based on python and powershell

去中心化远程控制工具（Decentralized Remote Administration Tool），通过ENS实现了配置文件分发的去中心化，通过Telegram实现了服务端的去中心化

the c2 programming language