A post exploitation framework designed to operate covertly on heavily monitored environments

the c2 programming language

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

LummaC2 extracted binaries by reversing & LummaC2 Stealer Analysis

Method Archive (Layer3 / Layer4 / Layer7 / Bypass + Various Other scripts)

A repository dedicated to researching, documenting, developing, and ultimately, defending against various strains of malicious software.

NTP command & control

EternalHush - new free advanced open-source c2 framework

custom c2 framework with beacons for both linux and windows

C2 extensible for post-explotation and remote control

P2P Hybrid-Decentralized mesh C2 framework (C implants + Python server + Dashboard) for resilient red‑team ops

C2 : Command and Control Server for the Trojan Backdoor, acting as Remote access tool.

the bear is an infostealer (grabber) malware written in C and assembly with the focus on evading detection.

A lightweight, modular Command and Control (C2) framework built for offensive security research and red teaming. Includes custom client implants in C++, a PHP-based operator panel, and staging/redirector support. Designed for stealth, extensibility, and learning the internals of real-world C2 infrastructure.

an armarda of tools for stealthily infiltration and post exploitation

Another Mirai Varient from two years ago

SSH server sends commands to client

This is the C code for the Remote Access Trojan (RAT) client. It performs various functions such as encryption/decryption, sending/receiving ICMP packets, and anti-debugging measures.