C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
☆33Jul 4, 2026Updated 3 weeks ago
Alternatives and similar repositories for c2detect
Users that are interested in c2detect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆34Jul 28, 2026Updated last week
- ☆201Jun 11, 2026Updated last month
- command control framework☆34Jul 11, 2026Updated 3 weeks ago
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆49Aug 13, 2025Updated 11 months ago
- The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver☆49Mar 13, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆16Apr 29, 2026Updated 3 months ago
- Extra cmdlets to help with quering security related information from Azure☆15Updated this week
- ☆16Jun 24, 2025Updated last year
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆35Feb 2, 2026Updated 6 months ago
- PoC that downloads an executable from a public SSL certificate☆137Jul 27, 2025Updated last year
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆17Aug 14, 2023Updated 2 years ago
- Repository hosting a hypothetical EDR Spoofer, as discovered originally by Nightmare-Eclipse☆41May 27, 2026Updated 2 months ago
- Collection of custom implementations about some WinAPI functions☆35Updated this week
- Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130☆55Sep 13, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of scripts to automate the Malware Analysis process☆34Oct 27, 2025Updated 9 months ago
- Atomic test units for BOF execution☆60Apr 26, 2026Updated 3 months ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆15Updated this week
- Script to chain search parameters for MalwareBazaar☆14Jan 26, 2025Updated last year
- A C# tool for extracting information from SCCM PXE boot media.☆57May 21, 2026Updated 2 months ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆127Dec 7, 2025Updated 7 months ago
- ☆29Nov 22, 2023Updated 2 years ago
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 5 months ago
- A PoC Cobalt Strike UDRL written in Rust☆33Jun 20, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Rusty Armory - Beacon Object Files (BOFs) in Rust (Codename: Armory)☆73Apr 3, 2026Updated 4 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆130Dec 28, 2025Updated 7 months ago
- Microsoft Vulnerable Driver Block Lists in CSV and JSON for SIEM lookups☆55May 15, 2026Updated 2 months ago
- PowerShell agent for AdaptixC2☆22Nov 16, 2025Updated 8 months ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆50Nov 17, 2025Updated 8 months ago
- Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and Mythic agents running on compromised hosts.☆17Updated this week
- find dll base addresses without PEB WALK☆170Jul 13, 2025Updated last year
- ☆346Aug 20, 2025Updated 11 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CurlWright is a Cloudflare bypass tool that leverages Playwright to execute curl commands with full browser capabilities, allowing you to…☆37Jun 28, 2026Updated last month
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆62Jun 15, 2026Updated last month
- kerberos in rust for fun and profit☆71Mar 13, 2026Updated 4 months ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆19Oct 28, 2023Updated 2 years ago
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆63May 4, 2026Updated 3 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 5 months ago
- Article backup☆30Jan 10, 2026Updated 6 months ago