Top 15 command-and-control Open-Source Projects

• sliver

  20 7,551 9.6 Go

  Adversary Emulation Framework

  

Project mention: With VPN's such as Twin Gate and TailScale, why open ports to expose services to the internet? | /r/selfhosted | 2023-07-05

IDK if you are too young to remember the fallout from Snowden, but the Kremlin threw out entire rooms computers and for a time used actual typewriters. Because those computers had, more or less, twingate connectors on them. That's a bit of a rich example, but you're essentially installing what sliver calls an implant, what meterpreter calls a payload, and what Cobalt Strike calls a beacon. It's cool if you want to, but there's no need when you can just open a port with the same technology a Fortune 50 does.

• merlin

  1 4,932 8.2 Go

  Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang. (by Ne0nd0g)

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• blocklist-ipsets

  39 2,949 2.7 Shell

  ipsets dynamically updated with firehol's update-ipsets.sh script

  

• kubesploit

  23 1,071 0.0 Go

  Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

  

• BlackMamba

  1 990 0.0 Python

  C2/post-exploitation framework

• GC2-sheet

  1 486 4.4 Go

  GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

• Owlyshield

  24 369 6.5 Rust

  Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).

  

Project mention: Owlyshield - an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact) | /r/purpleteamsec | 2023-07-06

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• dystopia-c2

  1 340 6.9 Python

  Windows Remote Administration Tool that uses Discord, Telegram and GitHub as C2s

• kaldi-active-grammar

  10 329 0.0 Python

  Python Kaldi speech recognition with grammars that can be set active/inactive dynamically at decode-time

Project mention: Ask HN: How do you get started with adding voice commands to a computer system? | news.ycombinator.com | 2023-11-21

https://github.com/dictation-toolbox/dragonfly

https://github.com/daanzu/kaldi-active-grammar

• Nimbo-C2

  1 296 8.3 Nim

  Nimbo-C2 is yet another (simple and lightweight) C2 framework

• PhoenixC2

  2 287 7.2 Python

  Command & Control-Framework created for collaboration in python3

  

• covert-tube

  2 105 2.9 Python

  Youtube as covert-channel - Control systems remotely and execute commands by uploading videos to Youtube

• PickleC2

  1 81 0.0 PowerShell

  PickleC2 is a post-exploitation and lateral movements framework

• chkdfront

  1 44 0.0 Ruby

  Check Domain Fronting (chkdfront) - It checks if your domain fronting is working

• gh0stbust3rz

  1 2 4.4 Python

  Build a C2 system while becoming a techie Gh0stbust3r! Learn real-world RedTeam skills and even earn a basic c2 by completing the game

Project mention: I create Retro RPG cybersecurity games as a hobby, and share them on GitHub for free. "Gh0stbust3rz" is a journey where you imbibe critical red team skills, understand the intricacies of network systems, most importantly, become a certified Gh0stbust3r rewarded with a functioning basic C2! | /r/u_Milosilo_hacks | 2023-09-11

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

command-and-control related posts

• First release of the phoenixc2 framework
  1 project | /r/redteamsec | 7 Apr 2023
• Covert-tube: Youtube as covert-channel - Control systems remotely and execute commands by uploading videos to Youtube
  1 project | /r/blueteamsec | 9 Oct 2021
• Covert-Tube: YouTube as covert-channel - Control systems remotely and execute commands by uploading videos to YouTube
  1 project | /r/purpleteamsec | 9 Oct 2021
• PickleC2 - A C2 framework with the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement
  1 project | /r/purpleteamsec | 13 Jul 2021
• Malware written in Go?
  3 projects | /r/golang | 6 Jul 2021
• KINGSABRI/chkdfront - Check Domain Fronting (chkdfront) - It checks if your domain fronting is working
  1 project | /r/GithubSecurityTools | 22 May 2021
• A note from our sponsor - SaaSHub
  www.saashub.com | 26 Apr 2024

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com