Skip to content

Home

Jump to bottom
MatrixTM26 edited this page Jun 24, 2026 · 5 revisions

TOMCAT-C2 Framework Wiki

Welcome to the official documentation for TOMCAT-C2 Framework — a modular, enterprise-grade Command & Control (C2) framework written in Java, built for authorized red team engagements and security research.

___________________      _____  _________     ________________ _________  ________
\__    ___/\_____  \    /     \ \_   ___ \   /  _  \__    ___/ \_   ___ \ \_____  \
  |    |    /   |   \  /  \ /  \/    \  \/  /  /_\  \|    |    /    \  \/  /  ____/
  |    |   /    |    \/    Y    \     \____/    |    \    |    \     \____/       \
  |____|   \_______  /\____|__  /\______  /\____|__  /____|     \______  /\_______ \
                   \/         \/        \/         \/                  \/         \/
                                         Framework

Author: MatrixTM26  |  Language: Java 17  |  License: AGPL-3.0

TOMCAT C2 is a modular, enterprise-grade adversary emulation framework written in Java. It supports multiple interface modes (Web, CLI, JavaFX GUI), mutual TLS authentication using PKCS12 keystores, AES-256-GCM encrypted agent communication, and multi-protocol session handling.

Important

Legal Notice & Disclaimer

TOMCAT-C2 Framework is provided strictly for authorized security testing, red team engagements, and educational research purposes only.

This software must only be used against systems, networks, or applications for which you have obtained explicit, documented authorization from the system owner — typically formalized through a signed rules-of-engagement (RoE) or penetration testing agreement.

Unauthorized access to computer systems is illegal under laws such as the Computer Fraud and Abuse Act (United States), the Computer Misuse Act (United Kingdom), and equivalent legislation in most other jurisdictions, and may result in civil and criminal penalties.

The author, MatrixTM26, and any contributors to this project assume no liability and are not responsible for any misuse, damage, or legal consequences arising from the use of this software.

By downloading, building, or using TOMCAT-C2 Framework, you agree that you are solely responsible for ensuring your use complies with all applicable local, national, and international laws.

Wiki Contents

Page Description
Getting Started Requirements, cloning, and first run
Installation and Build Building from source on Linux, Windows, macOS, BSD, Termux
Configuration server.properties and runtime settings
Interface Modes Web Panel, CLI, and JavaFX GUI
Certificate Management mTLS, CA, server, and agent certificates
Command Line Arguments Full CLI flag reference
Security Features Encryption and authentication model
FAQ Common questions and troubleshooting
Contributing Branching model and contribution guide

Quick Links

Support the Project

Ko-fi  |  Trakteer  |  PayPal

Copyright © 2023–2026 MatrixTM26 · All Rights Reserved

Clone this wiki locally