C2-下一代RAT

本项目用来收集整理C2的相关内容，包括优秀的C2项目代码或优秀的控制思路等。RAT是一门古老的技术，C2是下一代的RAT！不想拿到全世界控制权限的黑客不是好黑客。作者：0e0w

本项目创建于2021年8月19日，最近的一次更新时间为2024年8月10日。

• 01-C2资源
• 02-C2原理
• 03-C2项目
• 04-C2开发
• 05-C2免杀
• 06-C2参考

01-C2资源

• https://github.com/tcostam/awesome-command-control
• https://github.com/Ignitetechnologies/Command-Control

一、基础书籍

二、视频资源

• https://www.youtube.com/watch?v=eTA7weRp2yk

三、其他资源

• https://github.com/ProfessionallyEvil/C4
• https://github.com/JAYMONSECURITY/JMSec-Agent-RTO
• https://github.com/timb-machine/linux-malware
• https://bbs.pediy.com/thread-273930.htm
• https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc
• https://www.aqniu.com/vendor/93864.html
• https://0xrick.github.io/misc/c2/
• https://github.com/ZeroMemoryEx/C2-Hunter

02-C2原理

• C2是什么？远控是什么？流量隧道是什么？C2=远控+流量隧道？
• 优秀的C2是什么？
• Webshell管理工具算不算C2？可以执行命令的就算？
• 理想的C2有什么特征？图形化/自带免杀/匿名隐藏/......
• 远控只是C2的最基本的功能，未来的C2具备自我意识！

03-C2项目

• https://github.com/topics/c2
• https://github.com/search?q=Command+and+Control
• https://github.com/topics/command-and-control
• https://github.com/search?q=C2+frameworks
• https://github.com/topics/rat
• https://github.com/search?q=RAT
• https://github.com/alphaSeclab/awesome-rat
• https://github.com/killvxk/awesome-C2

一、Golang

• https://github.com/TerminalJockey/Kudzu
• https://github.com/BishopFox/sliver
• https://github.com/Ne0nd0g/merlin
• https://github.com/tiagorlampert/CHAOS
• https://github.com/Ne0nd0g/merlin-agent
• https://github.com/njcx/gocmd
• https://github.com/EngineerBetter/control-tower
• https://github.com/activecm/rita
• https://github.com/DeimosC2/DeimosC2
• https://github.com/Tylous/SourcePoint
• https://github.com/iimrudy/PrismaController
• https://github.com/timwhitez/Doge-Persistence-Platform
• https://github.com/mthbernardes/GTRS
• https://github.com/sensepost/godoh
• https://github.com/cyberark/kubesploit
• https://github.com/lu4p/ToRat
• https://github.com/lu4p/ToRat_server
• https://github.com/KCarretto/paragon
• https://github.com/degenerat3/meteor
• https://github.com/angus-y/PyIris-backdoor
• https://github.com/aminaxx/bossbash
• https://github.com/geemion/Khepri
• https://github.com/elleven11/pantegana
• https://github.com/maxlandon/wiregost
• https://github.com/CMatri/MeetC2
• https://github.com/phil-fly/generate
• https://github.com/msoap/shell2http
• https://github.com/Maka8ka/NGLite
• https://github.com/veo/vshell
• https://github.com/kgretzky/evilginx2
• https://github.com/EkiXu/reverse-shell-manager
• https://github.com/looCiprian/GC2-sheet
• https://github.com/whitehatnote/BlueShell
• https://github.com/Binject/shellcode
• https://github.com/sairson/SecShell
• https://github.com/fcre1938/Ortau
• https://github.com/jm33-m0/emp3r0r
• https://github.com/ssut/payload-dumper-go
• https://github.com/webxscan/linux_rat
• https://github.com/0x1a8510f2/wraith
• https://github.com/FrenchCisco/RATel
• https://github.com/sairson/sabathe
• https://github.com/aleenzz/BeggarC2
• https://github.com/mosajjal/dnspot
• https://github.com/kensh1ro/Willie-C2
• https://github.com/TRYblog/C2_Demo
• https://github.com/jkstack/natpass
• https://github.com/hudangwei/natpass
• https://github.com/MythicAgents/tetanus
• https://github.com/Phuong39/Ortau
• https://github.com/wraith-labs/wraith
• https://github.com/wikiZ/RedGuard
• https://github.com/burpheart/dnsc2
• https://github.com/newbe3three/gotoexec
• https://github.com/BradHacker/titan
• https://github.com/YDHCUI/manjusaka
• https://github.com/D00Movenok/goMalleable
• https://github.com/Ptkatz/OrcaC2
• https://github.com/WithSecureLabs/C3
• https://github.com/InjectionSoftwareandSecurityLLC/lupo
• https://github.com/Enelg52/KittyStager
• https://github.com/grines/goc2
• https://github.com/SpenserCai/DRat
• https://github.com/HavocFramework/Havoc
• https://github.com/HavocFramework/Talon
• https://github.com/0xTriboulet/Revenant
• https://github.com/xiao-zhu-zhu/noterce
• https://github.com/LsdDance/Homo-Network
• https://github.com/dobin/antnium
• https://github.com/dollarkillerx/civetcat
• https://github.com/hxdyjx/remote
• https://github.com/AuFeng111/linux_c2
• https://github.com/gatariee/Winton
• https://github.com/ClarkQAQ/nrat
• https://github.com/iammaguire/MeetC2

二、Python

• https://github.com/FunnyWolf/Viper
• https://github.com/its-a-feature/Mythic
• https://github.com/Arno0x/WSC2
• https://github.com/r00t-3xp10it/venom
• https://github.com/Coalfire-Research/Slackor
• https://github.com/maldevel/canisrufus
• https://github.com/Ziconius/FudgeC2
• https://github.com/0x09AL/DNS-Persist
• https://github.com/byt3bl33d3r/SILENTTRINITY
• https://github.com/UnkL4b/BabyShark
• https://github.com/th3r4ven/Bifrost
• https://github.com/0xGhazy/F4T3H-WinC2
• https://github.com/m8r0wn/transportc2
• https://github.com/mitre/caldera
• https://github.com/h0mbre/Dali
• https://github.com/byt3bl33d3r/SILENTTRINITY
• https://github.com/Telefonica/ibombshell
• https://github.com/zerosum0x0/koadic
• https://github.com/Marten4n6/EvilOSX
• https://github.com/mhaskar/Octopus
• https://github.com/AdrianVollmer/PowerHub
• https://github.com/slyd0g/SK8PARK
• https://github.com/trustedsec/trevorc2
• https://github.com/n1nj4sec/pupy
• https://github.com/neoneggplant/EggShell
• https://github.com/nil0x42/phpsploit
• https://github.com/loseys/BlackMamba
• https://github.com/Coalfire-Research/Slackor
• https://github.com/daanzu/kaldi-active-grammar
• https://github.com/KCarretto/Arsenal
• https://github.com/PushpenderIndia/nekros
• https://github.com/MythicAgents/venus
• https://github.com/tanc7/dark-lord-obama
• https://github.com/MythicAgents/Medusa
• https://github.com/MythicAgents/merlin
• https://github.com/MythicAgents/venus
• https://github.com/NullCode13/NullRAT
• https://github.com/Ba-hub/GhostRat
• https://github.com/pucarasec/zuthaka
• https://github.com/Cr4sh/MicroBackdoor
• https://github.com/gl4ssesbo1/Nebula
• https://github.com/reveng007/C2_Server
• https://github.com/alysif/SimpleRAT
• https://github.com/bigb0sss/kurosaki-C2
• https://github.com/FortyNorthSecurity/C2concealer
• https://github.com/Ph3nX-Z/WebShell-C2
• https://github.com/Rvn0xsy/Linco2
• https://github.com/mycve/WinController
• https://github.com/t3hbb/NSGenCS
• https://github.com/wavestone-cdt/abaddon
• https://github.com/hash3liZer/SillyRAT
• https://github.com/lapolis/palinka_c2
• https://github.com/mycve/TerminalController
• https://github.com/nathanlopez/Stitch
• https://github.com/5alt/ZeroRAT
• https://github.com/3ct0s/disctopia-c2
• https://github.com/epinna/weevely3
• https://github.com/t3l3machus/hoaxshell
• https://github.com/SaumyajeetDas/GodGenesis
• https://github.com/safesploit/PythonRAT
• https://github.com/doudoudedi/hackEmbedded
• https://github.com/screamz2k/PhoenixC2
• https://github.com/felixweyne/imaginaryC2
• https://github.com/XiaoliChan/RedCaddy
• https://github.com/MiBaLToALeX/ShellOrd
• https://github.com/t3l3machus/Villain

三、Java

• https://github.com/Cobalt-Strike
• https://github.com/LSTS/neptus
• https://github.com/Ramos-dev/OSSTunnel
• https://github.com/swagkarna/Rafel-Rat
• https://github.com/Kr9jd/HotRAT

四、C&C#&C++

• https://github.com/4g3nt47/Striker
• https://github.com/rasta-mouse/SharpC2
• https://github.com/sf197/Telegra_Csharp_C2
• https://github.com/NYAN-x-CAT/AsyncRAT-C-Sharp
• https://github.com/cobbr/Covenant
• https://github.com/onSec-fr/Http-Asynchronous-Reverse-Shell
• https://github.com/quasar/Quasar
• https://github.com/fozavci/petaqc2
• https://github.com/Raffy27/OrionPanel
• https://github.com/uvzz/IERat
• https://github.com/qwqdanchun/DcRat
• https://github.com/moom825/xeno-rat
• https://github.com/ryhanson/ExternalC2
• https://github.com/sogonsec/ViolentFungus-C2
• https://github.com/xdnice/PCShare
• https://github.com/sysrom/DcRatCHS
• https://github.com/A-D-Team/SharpMemshell
• https://github.com/void-stack/Orcus-1.9.1-src
• https://github.com/FULLSHADE/WARFOX-C2
• https://github.com/antonioCoco/ConPtyShell
• https://github.com/Gr1mmie/AtlasC2
• https://github.com/FSecureLABS/C3
• https://github.com/monoxgas/FlyingAFalseFlag
• https://github.com/SafeBreach-Labs/pinjectra
• https://github.com/bats3c/shad0w
• https://github.com/iagox86/dnscat2
• https://github.com/bigBestWay/dnstunnel
• https://github.com/pwn1sher/uuid-loader
• https://github.com/h3xduck/TripleCross
• https://github.com/capt-meelo/laZzzy
• https://github.com/TheD1rkMtr/GithubC2
• https://github.com/SecurityNo1/Gh0st2023
• https://github.com/DragoQCC/HardHatC2
• https://github.com/Idov31/Nidhogg
• https://github.com/Idov31/Sandman
• https://github.com/satadriver/myLittleBear
• https://github.com/DarkCoderSc/SharpFtpC2
• https://github.com/r3nhat/GRAT2
• https://github.com/F-Society-Freaks/AndroSpy
• https://github.com/DannyTheSloth/VanillaRAT
• https://github.com/NYAN-x-CAT/Mass-RAT
• https://github.com/p3nt4/Nuages
• https://github.com/enkomio/AlanFramework
• https://github.com/HackerCalico/Magic_C2
• https://github.com/iyzyi/MUA-Remote-Access-Trojan-V2

五、Rust

• https://github.com/postrequest/link
• https://github.com/b23r0/Heroinn
• https://github.com/b1tg/Ox-C2

六、Nim

• https://github.com/d4rckh/nimc2
• https://github.com/chvancooten/NimPlant
• https://github.com/itaymigdal/Nimbo-C2

七、PHP

• https://github.com/EnginDemirbilek/NorthStarC2

八、Powershell

• https://github.com/ahmedkhlief/Ninja
• https://github.com/BC-SECURITY/Empire
• https://github.com/nettitude/PoshC2
• https://github.com/r00t-3xp10it/meterpeter
• https://github.com/xRET2pwn/PickleC2
• https://github.com/alexfrancow/badusb_botnet
• https://github.com/Raffy27/OrionServer
• https://github.com/JoelGMSec/PSRansom

九、Other

• https://github.com/rapid7/metasploit-framework
• https://github.com/0x727/MetasploitCoop_0x727
• https://github.com/Project-Prismatica/Prismatica
• https://github.com/jephthai/EvilVM
• https://github.com/KINGSABRI/chkdfront
• https://github.com/Raffy27/OrionBot
• https://github.com/MisterTea/EternalTerminal
• https://github.com/sneakerhax/C2PE
• https://github.com/0x727/SchTask_0x727
• https://github.com/preludeorg/community
• https://github.com/Arno0x/DBC2
• https://github.com/lcvvvv/backway
• https://github.com/AlphabugX/nopen
• https://github.com/Tomiwa-Ot/moukthar
• https://github.com/aplyc1a/NTPShell
• https://github.com/wraith-labs/wraith-dcc2
• https://github.com/yzddmr6/Java-Shellcode-Loader
• https://github.com/FlyfishSec/rsGen
• https://bruteratel.com
• https://github.com/JohnHammond/c2c2
• https://github.com/tdragon6/Supershell
• https://github.com/INotGreen/XiebroC2

04-C2开发

一、C2原理

二、C2加密

05-C2免杀

06-C2参考

• https://thestack.technology/from-c2-to-c3
• https://www.foregenix.com/blog/a-first-look-at-todays-command-and-control-frameworks
• https://www.thec2matrix.com
• http://ask.thec2matrix.com
• https://threatexpress.com/blogs/2019/c2-agent-comparison
• https://www.varonis.com/blog/what-is-c2
• https://www.thec2matrix.com/matrix
• https://awesomeopensource.com/projects/c2