Build software better, together

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

c cybersecurity beacon payload cobalt-strike c2 cobaltstrike

Updated Jul 28, 2026
C

28Zaaky / khaos-c2

Star

KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.

windows linux post-exploitation evasion offensive-security cobalt-strike c2 havoc command-and-control redteam

Updated Sep 15, 2026
C

0x4meliorate / toxnet

Star

Decentralised P2P botnet using toxcore.

go golang botnet virus end-to-end peer-to-peer decentralized malware p2p distributed encrypted tox malware-analysis malware-research toxcore end-to-end-encryption c2 implant p2p-botnet

Updated Feb 8, 2026
C

x86byte / LummaC2-Stealer

Star

LummaC2 extracted binaries by reversing & LummaC2 Stealer Analysis

reverse-engineering malware malware-analysis malware-research malware-development reversing c2 command-and-control stealer lummac2

Updated Feb 18, 2025
C

BlackSnufkin / Maverick

Star

Adaptix C2 agent using Crystal Palace PIC linker and PICO module system

evasion pico c2 redteam crystal-palace

Updated Jun 7, 2026
C

t1b4n3 / TibaneC2

Star

A lightweight Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).

hacking post-exploitation offensive-security malware-development red-team c2 red-teaming offensivesecurity c2-framework redteaming-tools c2-server offensive-security-tooling offensive-security-projects red-team-infrastructure

Updated Dec 17, 2025
C

HackingLZ / sleepwalker

Star

Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command language.

python c windows bytecode backdoor reverse-engineering malware-analysis c2 security-research redteam implant

Updated Aug 26, 2026
C

0xvpr / Malicious-Software-Research

Star

A repository dedicated to researching, documenting, developing, and ultimately, defending against various strains of malicious software.

socket obfuscation research server injection ransomware keylogger shellcode evasion c2 living-off-the-land

Updated Mar 13, 2026
C

endgamec2framework / endgame

Star

ENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations

golang ai penetration-testing post-exploitation offensive-security red-team c2 command-and-control security-research bof

Updated Sep 23, 2026
C

Jieyab89 / Loader-and-shell-code-AV-Evasion

Star

A list of shellcode and loader, tools for C2 and malware analysis, designed to create shellcode and evade antivirus software such as Windows Defender, Avira, and McAfee

malware loader hacking shellcode shellcode-loader c2 shellcode-injection

Updated Jul 4, 2026
C

ToxnetV2: A decentralized, peer-to-peer botnet C2 framework built on the Tox encrypted messaging protocol. Features cross-platform payloads for 10+ architectures (x86, ARM, MIPS), 20+ attack vectors, stealth persistence, IoT self-replication, and built-in Tor anonymity. Modern Go implementation for educational security research.

bot golang ddos botnet mirai p2p rat ddos-attacks cnc c2 remote-code-execution p2p-botnet mirai-botnet botnet-source layer7-ddos botnet-tool decentralized-botnet

Updated Apr 9, 2026
C

onedays12 / Iris

Star

IrisC2 is A modular C2 framework for authorized security research, featuring Iris Client, Server, Beacon, stager templates, payload generation, tasking, file transfer, tunneling, BOF plugins, and real-time operations.

exploit post-exploitation c2 red-team-engagement command-and-control c2-framework