C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
☆32Aug 15, 2026Updated last week
Alternatives and similar repositories for c2detect
Users that are interested in c2detect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆34Jul 28, 2026Updated 3 weeks ago
- ☆215Jun 11, 2026Updated 2 months ago
- command control framework☆34Updated this week
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆49Aug 13, 2025Updated last year
- The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver☆50Mar 13, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆16Apr 29, 2026Updated 3 months ago
- Extra cmdlets to help with quering security related information from Azure☆15Jul 28, 2026Updated 3 weeks ago
- ☆14Jun 24, 2025Updated last year
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆33Feb 2, 2026Updated 6 months ago
- PoC that downloads an executable from a public SSL certificate☆137Jul 27, 2025Updated last year
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆17Aug 14, 2023Updated 3 years ago
- Repository hosting a hypothetical EDR Spoofer, as discovered originally by Nightmare-Eclipse☆43May 27, 2026Updated 2 months ago
- Collection of custom implementations about some WinAPI functions☆38Jul 30, 2026Updated 3 weeks ago
- Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130☆55Sep 13, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Collection of scripts to automate the Malware Analysis process☆34Oct 27, 2025Updated 9 months ago
- Atomic test units for BOF execution☆60Apr 26, 2026Updated 4 months ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆15Updated this week
- Script to chain search parameters for MalwareBazaar☆14Jan 26, 2025Updated last year
- A C# tool for extracting information from SCCM PXE boot media.☆57May 21, 2026Updated 3 months ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆127Dec 7, 2025Updated 8 months ago
- ☆29Nov 22, 2023Updated 2 years ago
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 6 months ago
- A PoC Cobalt Strike UDRL written in Rust☆33Jun 20, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Rusty Armory - Beacon Object Files (BOFs) in Rust (Codename: Armory)☆72Apr 3, 2026Updated 4 months ago
- CVE-2026-46242☆19Jul 4, 2026Updated last month
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆131Dec 28, 2025Updated 7 months ago
- Microsoft Vulnerable Driver Block Lists in CSV and JSON for SIEM lookups☆55May 15, 2026Updated 3 months ago
- PowerShell agent for AdaptixC2☆22Nov 16, 2025Updated 9 months ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 9 months ago
- Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and Mythic agents running on compromised hosts.☆21Updated this week
- find dll base addresses without PEB WALK☆170Jul 13, 2025Updated last year
- ☆347Aug 20, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 2 months ago
- CurlWright is a Cloudflare bypass tool that leverages Playwright to execute curl commands with full browser capabilities, allowing you to…☆37Jun 28, 2026Updated last month
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆64Jun 15, 2026Updated 2 months ago
- kerberos in rust for fun and profit☆71Mar 13, 2026Updated 5 months ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆19Oct 28, 2023Updated 2 years ago
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆63May 4, 2026Updated 3 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 6 months ago