A post exploitation framework designed to operate covertly on heavily monitored environments

the c2 programming language

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

Method Archive (Layer3 / Layer4 / Layer7 / Bypass + Various Other scripts)

LummaC2 extracted binaries by reversing & LummaC2 Stealer Analysis

A repository dedicated to researching, documenting, developing, and ultimately, defending against various strains of malicious software.

NTP command & control

EternalHush - new free advanced open-source c2 framework

C2 extensible for post-explotation and remote control

C2 : Command and Control Server for the Trojan Backdoor, acting as Remote access tool.

an armarda of tools for stealthily infiltration and post exploitation

custom c2 framework with beacons for both linux and windows

the bear is an infostealer (grabber) malware written in C and assembly with the focus on evading detection.

Another Mirai Varient from two years ago

SSH server sends commands to client

This is the C code for the Remote Access Trojan (RAT) client. It performs various functions such as encryption/decryption, sending/receiving ICMP packets, and anti-debugging measures.

Dynamic encryption method ransomware