SQLC2
netspi/sqlc2SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
cloud-securitycommand-and-controldatabase-security+3
76
netspi/sqlc2SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
mrcord77/beacon-hunterDetects phi-structured C2 beacons that evade RITA and standard regularity-based detectors
coalfire-research/slackorA Golang implant that uses Slack as a command and control server
maldevel/canisrufusA stealthy Python based Windows backdoor that uses Github as a command and control server
maldevel/gdogA fully featured Windows backdoor that uses Gmail as a C&C server
maldevel/dicerosbicornisA fully featured Windows backdoor that uses email as a C&C server
byt3bl33d3r/gcatA PoC backdoor that uses Gmail as a C&C server
paulsec/twittorA fully featured backdoor that uses Twitter as a C&C server
umutcamliyurt/pingratICMP-based command-and-control tool that tunnels C2 traffic through firewalls using ping payloads, undetectable by most AV/EDR solutions.
frkngksl/nimexecFileless Command Execution for Lateral Movement in Nim
nirvanaon/spotifyc2Windows-based C2 research tool that uses Spotify playlists as a command channel and Telegram for output delivery, demonstrating cloud-assisted…
kaandemir993/salat-stealer-telegram-proxy-decoy-c2-analysis"Reverse engineering analysis of Salat Stealer, a Go-based info-stealer that uses a Telegram proxy decoy, C2 communication, and encrypted memory…
ahhh/reverse_dns_shellA python reverse shell that uses DNS as the c2 channel
codextf2/screenshotbofAn alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.
petercunha/goat🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server
geeoon/dns-tunnel-keyloggerKeylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes through firewalls.
blazeinfosec/bt2Blaze Telegram Backdoor Toolkit is a post-exploitation tool that leverages the infrastructure of Telegram as a C&C
kudaes/lolbits** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for…