Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Covenant is a collaborative .NET C2 framework for red teamers.

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

C2/post-exploitation framework

A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assignments.

A cross platform C2/post-exploitation framework.

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Components.

A modular C2 framework

C2 Powershell Command & Control Framework with BuiltIn Commands

A C2 post-exploitation framework

Nimbo-C2 is yet another (simple and lightweight) C2 framework

Next Generation C2 Framework, IoM-server/client

Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection

PoC module to demonstrate automated lateral movement with the Havoc C2 framework.

A suite of tools to disrupt campaigns using the Sliver C2 framework.

Web Based Command Control Framework (C2) #C2 #PostExploitation #CommandControl #RedTeam #C2Framework #PHPC2 #.NETMalware #Malware #PHPMalware #CnC #infosec #offensivesecurity #Trojan

IoM implant, C2 Framework and Infrastructure

A flexible, AI powered C2 framework built with operators in mind

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

C# C2 Framework centered around Stage 1 operations

StoneKeeper C2, an experimental EDR evasion framework for research purposes

A C2 framework for initial access in Go

Modular C2 framework aiming to ease post exploitation for red teamers.

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.