Covenant is a collaborative .NET C2 framework for red teamers.

Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol

A Streamlined FTP-Driven Command and Control Conduit for Interconnecting Remote Systems.

A light C# implant that bypasses Windows Firewall and Defender

Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.

A copy of my little beautiful malware I used in IRSeC 2019

C#基于HTTP实现带GUI的简单远程控制程序

Loading Csharp C2 Client-side codes in RAM by Very Simple New Technique to avoid Detection

NativePayload_NetMonitor Monitoring NetworkTraffic over [ICMP/ARP/TCP/UDP + HTTP + DNS] by ws2_32.dll Windows Sockets Library

Repository made to explore untraditional ways of establishing command and control (C2) on Windows systems.

Omniscient is a VERY minimalist Command and Control (C2) Command Line Interface (CLI).

backdoor written in C#, undetectable by antivirus. 0/26

in C# you can use Emit(Opcodes.jmp,TargetMethod) in your codes without writing any asm bytes in code to jump to pointer of TargetMethod or (MethodInfo) to run in-memory via Emit(Opcodes.jmp, method) in system.reflection namespace

🛑 An async and lightweight C# library for interacting with the IOCLists.com API.

CSHARP DCOM Fun

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能