C2 Matrix | #C2Matrix

#C2Matrix info: Main site: thec2matrix.com Golden Source: docs.google.com/spreadsheets/d… How-To: howto.thec2matrix.com SANS Slingshot C2 Matrix Edition VM: howto.thec2matrix.com/slingshot-c2-m… YouTube: youtube.com/playlist?list=… Feedback: thec2matrix.com/feedback /@jorgeorchilles

Hermes - a Python agent targeting Linux for Mythic C2 github.com/0xbbuddha/herm…

We added NeoC2 to #C2Matrix, check it out at github.com/stillbigjosh/N…

Released a lightweight C2 for testing. Kept v1 lean and focused on core functionality, but v2 will bring advanced features based on real feedback. Give it a spin and let me know what you need, building this for practitioners, not just as a project github.com/stillbigjosh/N…

Venom C2 tool drop! 🐍 During a recent red team engagement we needed a simple python agent that needs no dependencies to setup persistence on some exotic boxes we landed on. Some had EDR so we didn't want anything off-the-shelf. The server, agent, and client were made mid-engagement and kept our foothold for weeks. I have no use for this anymore, so thought i'd share it instead of letting it evaporate into the /dev/null. Link to boku7/venom GitHub repo : github.com/boku7/venom

Added Venom to #C2Matrix a dependency‑free Python3 Command & Control framework for redteam persistence github.com/boku7/venom

Added OnlyShell to #C2Matrix "A powerful Go-based multi-shell handler for managing multiple reverse shell connections simultaneously with features like shell type detection, background management, command broadcasting, and real-time interaction." github.com/malwarekid/Onl…

Introducing Wyrm, currently in pre-release - a bit of a hobby project which I am working towards v1.0 for, a Red Team C2 framework which one day will hopefully rival Cobalt Strike, Sliver, etc in terms of capability. Come check it out here! github.com/0xflux/wyrm #redteam #cybersecurity #infosec #pentesting #pentest #wyrm #c2 #maldev #cyber #pentest

Added PhantomPipe: a POC C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and result collection. By tunneling through ngrok, you can quickly expose your C2 server to the public internet github.com/mbhatt1/Phanto…

Added Orsted C2 to #C2Matrix Nicely documented too github.com/almounah/orsted almounah.github.io/orsted-doc/int…

Added the new MeetC2 as MeetingC2 to #C2Matrix, it is our first name collision. Look at the C2Matrix before naming your C2 ;) #gid=0" target="_blank" rel="nofollow noopener">docs.google.com/spreadsheets/d…

✍️ A framework abusing Google Calendar APIs as a C2 medium.com/deriv-tech/mee…

🛠️ A serverless command & control (C2) framework 🗓️ Leverages Google Calendar APIs, as a covert communication channel between operators and a compromised system github.com/deriv-security…

We've just pushed details on our latest #Nighthawk release (Sivako) nighthawkc2.io/sivako/ - including async BOF support, native kerberos and more 🔥 vimeo.com/1115201393?sha…

Empire v6.2 is Out! Here are a few of the updates: - Go and C# Agent Improvements - Clean & reset server options - Added port normalization - Allow X-Empire-Token for API access github.com/BC-SECURITY/Em…

Added Tuoni to #C2Matrix today github.com/shell-dot/tuoni

Great C2 talk at BlackHat 2025 by @UNC1739 Ghost Calls: Abusing Web Conferencing for Covert Command & Control Slides: i.blackhat.com/BH-USA-25/Pres… Tool release: github.com/praetorian-inc…

This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion github.com/123ojp/GREtunn…

Good write up on setting up C2, redirectors, Mythic, Apollo, best practices, etc: xbz0n.sh/blog/mythic-c2…

New C2 dropped over night. The Skinny Guerrilla Command and Control (SGCC) gets its name from its goal to generate minimalist implants with only the commands necessary for the operator to accomplish their objective. Added to #C2Matrix github.com/JCSteiner/SGCC…