C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
☆43Sep 13, 2026Updated last month
Alternatives and similar repositories for c2detect
Users that are interested in c2detect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated 2 months ago
- Escalating privilege in the system from unsigned driver using throttlestop vulnerability☆15Apr 17, 2026Updated 6 months ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆38Updated this week
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- command control framework☆38Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- another PrivEsc potato...☆122Sep 5, 2026Updated last month
- Proof-of-Concept software for creating inbound AD forest trusts.☆22Jun 25, 2025Updated last year
- A WIP Mythic agent that uses Crystal Palace to build its payloads.☆17Jul 26, 2026Updated 3 months ago
- ☆14Jun 24, 2025Updated last year
- Group3r but in Python☆64Oct 11, 2026Updated 2 weeks ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆128Aug 22, 2026Updated 2 months ago
- Atomic test units for BOF execution☆61Apr 26, 2026Updated 6 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆16Updated this week
- The AI Autonomous SOC & Purple-Team Engine☆30Aug 11, 2026Updated 2 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆48Aug 20, 2026Updated 2 months ago
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆18Updated this week
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆147Aug 20, 2026Updated 2 months ago
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆50Aug 13, 2025Updated last year
- The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver☆49Mar 13, 2026Updated 7 months ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Oct 16, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 4, 2026Updated 2 months ago
- ☆219Sep 11, 2026Updated last month
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- ☆16Apr 29, 2026Updated 6 months ago
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆35Oct 12, 2026Updated 2 weeks ago
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆35Feb 2, 2026Updated 8 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆164Jul 20, 2026Updated 3 months ago
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆77Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆23Oct 21, 2026Updated last week
- Collection of scripts to automate the Malware Analysis process☆33Oct 27, 2025Updated last year
- Enhanced Evasion for Threadless Injections☆15May 29, 2026Updated 5 months ago
- LLVM based obfuscator☆44Sep 20, 2026Updated last month
- iboot researches☆14Sep 13, 2026Updated last month
- Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130☆54Sep 13, 2025Updated last year
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month