A post exploitation framework designed to operate covertly on heavily monitored environments

the c2 programming language

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

LummaC2 extracted binaries by reversing & LummaC2 Stealer Analysis

Method Archive (Layer3 / Layer4 / Layer7 / Bypass + Various Other scripts)

A repository dedicated to researching, documenting, developing, and ultimately, defending against various strains of malicious software.

NTP command & control

EternalHush - new free advanced open-source c2 framework

custom c2 framework with beacons for both linux and windows

A lightweight, modular Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).

Command and aontrol, server and implants for stealth red-teaming mode.

C2 extensible for post-explotation and remote control

P2P Mesh C2 framework (C implants + Python server + Dashboard) for resilient red‑team ops

the bear is an infostealer (grabber) malware written in C and assembly with the focus on evading detection.

an armarda of tools for stealthily infiltration and post exploitation

Another Mirai Varient from two years ago

SSH server sends commands to client

This is the C code for the Remote Access Trojan (RAT) client. It performs various functions such as encryption/decryption, sending/receiving ICMP packets, and anti-debugging measures.