#C2Matrix info:

Main site: thec2matrix.com

Golden Source: docs.google.com/spreadsheets/d…

How-To: howto.thec2matrix.com

SANS Slingshot C2 Matrix Edition VM: howto.thec2matrix.com/slingshot-c2-m…

YouTube: youtube.com/playlist?list=…

Feedback: thec2matrix.com/feedback

/@jorgeorchilles

Added Endgame to #C2Matrix - AI-powered command and control for professional red team operations

github.com/endgamec2frame…

We added KHAOS to the #C2Matrix today KHAØS is a modern post-exploitation C2 framework with 5 covert channels and full evasion built in, created by @28zaaky. github.com/28Zaaky/khaos-…

redStack is a Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform, to be used for training/self hosted environments.

github.com/BaddKharma/red…

Added SmokedMeat to #C2Matrix thanks to @SecurePeacock for letting us know!

github.com/boostsecurityi…

Hermes - a Python agent targeting Linux for Mythic C2

github.com/0xbbuddha/herm…

We added NeoC2 to #C2Matrix, check it out at github.com/stillbigjosh/N…

Released a lightweight C2 for testing. Kept v1 lean and focused on core functionality, but v2 will bring advanced features based on real feedback. Give it a spin and let me know what you need, building this for practitioners, not just as a project

github.com/stillbigjosh/N…

Venom C2 tool drop! 🐍

During a recent red team engagement we needed a simple python agent that needs no dependencies to setup persistence on some exotic boxes we landed on.

Some had EDR so we didn't want anything off-the-shelf.
The server, agent, and client were made our foothold for weeks. I have no use for this anymore, so thought i'd share it instead of letting it evaporate into the /dev/null.

Link to boku7/venom GitHub repo : github.com/boku7/venom

Added Venom to #C2Matrix a dependency‑free Python3 Command & Control framework for redteam persistence github.com/boku7/venom

Added OnlyShell to #C2Matrix "A powerful Go-based multi-shell handler for managing multiple reverse shell connections simultaneously with features like shell type detection, background management, command broadcasting, and real-time interaction." github.com/malwarekid/Onl…

Introducing Wyrm, currently in pre-release - a bit of a hobby project which I am working towards v1.0 for, a Red Team C2 framework which one day will hopefully rival Cobalt Strike, Sliver, etc in terms of capability.

Come check it out here! github.com/0xflux/wyrm

#redteam #pentesting #pentest #wyrm #c2 #maldev #cyber #pentest

Added PhantomPipe: a POC C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and result collection. By tunneling through ngrok, you can quickly expose your C2 server to the public internet github.com/mbhatt1/Phanto…

Added Orsted C2 to #C2Matrix Nicely documented too

github.com/almounah/orsted
almounah.github.io/orsted-doc/int…

Added the new MeetC2 as MeetingC2 to #C2Matrix, it is our first name collision. Look at the C2Matrix before naming your C2 ;)

docs.google.com/spreadsheets/d…

✍️ A framework abusing Google Calendar APIs as a C2 medium.com/deriv-tech/mee…

🛠️ A serverless command & control (C2) framework
🗓️ Leverages Google Calendar APIs, as a covert communication channel between operators and a compromised system
github.com/deriv-security…

We've just pushed details on our latest #Nighthawk release (Sivako) nighthawkc2.io/sivako/ - including async BOF support, native kerberos and more 🔥 vimeo.com/1115201393?sha…

Empire v6.2 is Out!

Here are a few of the updates:
- Go and C# Agent Improvements
- Clean & reset server options
- Added port normalization
- Allow X-Empire-Token for API access

github.com/BC-SECURITY/Em…

Added Tuoni to #C2Matrix today

github.com/shell-dot/tuoni

Great C2 talk at BlackHat 2025 by @UNC1739 Ghost Calls: Abusing Web Conferencing for Covert Command & Control

Slides: i.blackhat.com/BH-USA-25/Pres…

Tool release: github.com/praetorian-inc…