awesome-command-control - A collection of awesome Command & Control (C2) fra

项目说明

!shall we play a game?

<br/>
<di="center">

![Awesome]()

_List inspired by the awesome list thing._

Maintained by:
</div>
<br/>

Awesome Command & Control

A collection of awesome Command &amp; Control (C2) frameworks, tools and resources for post-exploitation and red teaming assessments.

If you'd like to __contribute__ to this list, simply open a PR with your additions.

Maintained by . If you ha but can't pull request, give me a shout at twitter.

Table of Contents
=================

* Tools
* Open Source
* Commercial
* Online Resources
* Articles
*

Tools

Open Source

* Apfell: cross-platform, post-exploit, red teaming framework built with python3, docker, docker-compose, and a web browser UI.
* AsyncRat C#: Remote Access Tool designed to remotely monitor and control other computers through a secure encrypted connection.
* Baby Shark: basic C2 generic ser in Python and Flask.
* C3: framework that extends other red team tooling, such as the commercial Cobalt Strike (CS) product , which is supported at release.
* Caldera: built on the MITRE ATT&CK™ framework and an acti project at MITRE.
* CHAOS: PoC that allow payloads generation and control remote operating systems
* Dali: image-based C2 channel which utilizes Imgur to host images and task agents.
* Empire: post-exploitation framework that includes a pure-PowerShell2.0 Windows agent, and a pure Python 2.6/2.7 Linux/OS X agent
* Co: .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborati and control platform for red teamers.
* Silent Trinity: post-exploitation agent powered by Python, IronPython, C#/.NET.
* Faction C2: C2 framework which use websockets based API that allows for interacting with agents and transports.
* Flying A False Flag
* FudgeC2: Powershell C2 platform designed to facilitate team collaboration and campaign timelining.
* Godoh
* iBombshell
* HARS: HTTP/S Asynchronous Reverse Shell.
* Koadic (or COM Command & Control): is a Windows post-exploitation rootkit similar to other penetration testing tools such as Meterpreter and Powershell Empire.
* MacShellSwift
* Ninja: Open source C2 ser by Purple Team to do stealthy computer and Acti enumeration without being detected by SIEM and AVs.
* NorthStarC2: open-source command and control framework de for penetration testing and red teaming purposes.
* E: An evil RAT (Remote Administration Tool) for macOS / OS X.
* Nuages
* Octopus: open source, pre-operation C2 ser on python which can control an Octopus powershell agent through HTTP/S.
* PoshC2: proxy aware C2 framework written completely in PowerShell to aid penetration testers with red teaming, post-exploitation and lateral mo
* Powerhub: con post exploitation tool for PowerShell which aids a pentester in transferring data, in particular code which may get flagged by endpoint protection.
* Prismatica: modular C2 Interface hooked into the Diagon Command and Control Toolkit.
* QuasarRAT: fast and light-weight remote administration tool coded in C#. Pro high stability and an easy-to-use user interface, Quasar is the perfect remote administration solution for you.
* Merlin: cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
* Sliver: general purpose cross-platform implant framework that supports C2 o, HTTP(S), and DNS.
* SK8PARK/RAT
* Throwback
* Trevor C2: legitimate website (browsable) that tunnels client/ser for covert command execution.
* Metasploit Framework: computer security project that provides information about security and aids in penetration testing and IDS signature de
* Meterpreter
* Pupy: opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python.
* PetaQ: malware which is being de in .NET Core/Framework to use websockets as Command & Control (C2) channels.
* Pinjectra: C/C++ library that implements Process Injection techniques (with focus on Windows 10 64-bit) in a "mix and match" style.
* Re
* SHAD0W: modular C2 framework designed to use a range of methods to evade EDR and AV.
* SharpC2
* Gcat: stealthy Python based backdoor that uses Gmail as a command and control server.
* DNScat2: tool is designed to create an encrypted command-and-control (C&C) channel over the DNS protocol.
* EggShell: post exploitation sur tool written in Python. It gives you a command line session with extra functionality between you and a target machine.
* EvilVM
* : pretty basic RAT written in c#.net.
* WEASEL: small in-memory implant using Python 3 with no dependencies.

Commercial

* Innuendo
* Scythe
* Cobalt Strike: software for Ad Simulations and Red Team Operations.
* Red Team Toolkit (or Slingshot)
*

Online Resources

* The C2 Matrix
* C2 Agent Comparison (Aug 2019)

Articles

* A comparisson of C2 frameworks
* Flying a False Flag
* MacShellSwift: PoC MacOS post exploitation tool in Swift
* Throwback Thursday – A Guide to Configuring Throwback
* CE Quickstart
* A first look at today’s Command and Control frameworks

* RedViper
* Command & Control tools course, in Pt-Br language.
* How Hackers Use Discord To Control PC’s

项目信息

开发语言：未知

Star 数：984

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assignments.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。