Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
☆446Oct 26, 2022Updated 4 years ago
Alternatives and similar repositories for imaginaryC2
Users that are interested in imaginaryC2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…☆268Jan 15, 2022Updated 4 years ago
- Various snippets created during malware analysis☆466Oct 3, 2025Updated last year
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆283Dec 13, 2021Updated 4 years ago
- Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.☆642Nov 27, 2024Updated last year
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆729Dec 26, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 🔵 Ethereum and BNB (BSC) Mev bot - Arbitrage☆367Mar 4, 2026Updated 7 months ago
- ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and man…☆301Apr 24, 2020Updated 6 years ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- Various config files obtained during malware analysis☆68Oct 31, 2018Updated 7 years ago
- Quickly debug shellcode extracted during malware analysis☆641May 23, 2023Updated 3 years ago
- ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.☆93May 23, 2019Updated 7 years ago
- Malware Configuration And Payload Extraction☆763Nov 22, 2024Updated last year
- Static based decoders for malware samples☆93Jul 27, 2020Updated 6 years ago
- DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2…☆447Aug 7, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- FAME Automates Malware Evaluation☆952Oct 23, 2026Updated last week
- Volatility plugin for extracts configuration data of known malware☆498Dec 22, 2023Updated 2 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆1,133Jul 10, 2024Updated 2 years ago
- Obfuscate specific windows apis with different apis☆1,025Feb 21, 2021Updated 5 years ago
- For all these times you're asking yourself "what is this panel again?"☆262Jan 29, 2026Updated 9 months ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆591May 5, 2024Updated 2 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,109Nov 3, 2017Updated 8 years ago
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆1,614Dec 10, 2018Updated 7 years ago
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆3,298Aug 2, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows kernel and user mode emulation.☆2,095Updated this week
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,426Jun 6, 2026Updated 4 months ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,785Sep 23, 2025Updated last year
- YARA signature and IOC database for my scanners and tools☆3,058Updated this week
- c2 traffic☆193Feb 6, 2023Updated 3 years ago
- Powershell C2 Server and Implants☆574Nov 11, 2019Updated 6 years ago
- Enumerate and disable common sources of telemetry used by AV/EDR.☆861Mar 11, 2021Updated 5 years ago
- Windows 10 UAC bypass for all executable files which are autoelevate true .☆637Dec 9, 2019Updated 6 years ago
- Builds malware analysis Windows VMs so that you don't have to.☆1,047Aug 23, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Malcom - Malware Communications Analyzer☆1,174Nov 29, 2017Updated 8 years ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆2,220Updated this week
- Robber is open source tool for finding executables prone to DLL hijacking☆800Jul 8, 2026Updated 3 months ago
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,789Jan 16, 2026Updated 9 months ago
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,933Jun 6, 2026Updated 4 months ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆814Dec 17, 2019Updated 6 years ago
- Open source pre-operation C2 server based on python and powershell☆767Jul 6, 2021Updated 5 years ago