Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go beacon with ECDSA-signed tasks and compile-time OPSEC profiles. One operator console, shared TLS, per-session logs.
☆39Oct 7, 2026Updated 3 weeks ago
Alternatives and similar repositories for TornadoRevC2
Users that are interested in TornadoRevC2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆50Oct 27, 2026Updated last week
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆69Oct 25, 2026Updated last week
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆113Jul 26, 2026Updated 3 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆18Oct 3, 2026Updated last month
- ☆23Jul 6, 2026Updated 4 months ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated last week
- No-open firmware exploit for the Wyze WLPA19CV2 color bulb☆14Sep 2, 2026Updated 2 months ago
- Automated proxy DLL generator for DLL hijacking☆26Jun 4, 2026Updated 5 months ago
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆17Oct 19, 2025Updated last year
- ☆72Jul 12, 2026Updated 3 months ago
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆35Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- Mythic C2 MSTeams Communication Channel☆42Sep 13, 2026Updated last month
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- Cold Xan RAT - a Quasar-based Remote Access Trojan's full src code and detection rules, along with short analysis of it's capabilities☆27Sep 1, 2026Updated 2 months ago
- A PoC Cobalt Strike UDRL written in Rust☆35Sep 12, 2026Updated last month
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- A simple C2 Framework written in modern C++☆35Jul 2, 2026Updated 4 months ago
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆37Oct 20, 2026Updated 2 weeks ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆77Oct 18, 2026Updated 2 weeks ago
- ☆37May 19, 2026Updated 5 months ago
- A foundational C library for building operationally credible offensive capabilities☆95Sep 21, 2026Updated last month
- Application-scoped Windows network brownouts in native C and BOF form☆23Aug 18, 2026Updated 2 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆129Sep 1, 2026Updated 2 months ago
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.☆51Sep 26, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- technical analysis of a steganographic loader (Crypters and Tools) used by likely-TA558 to deliver various malware in Italy and Colombia☆14Aug 18, 2025Updated last year
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆56Jun 28, 2026Updated 4 months ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 27, 2026Updated last week
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated 2 months ago
- goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current…☆70Jun 28, 2026Updated 4 months ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Fileless ELF execution☆86Sep 12, 2026Updated last month