本项目用来收集整理C2的相关内容，包括优秀的C2项目代码或优秀的控制思路等。RAT是一门古老的技术，C2是下一代的RAT！不想拿到全世界控制权限的黑客不是好黑客。作者：[0e0w](https://github.com/0e0w)

本项目创建于2021年8月19日，最近的一次更新时间为2024年8月10日。

*   [01-C2资源](https://github.com/Goyk/C2#01-c2%E8%B5%84%E6%BA%90)
*   [02-C2原理](https://github.com/Goyk/C2#02-c2%E5%8E%9F%E7%90%86)
*   [03-C2项目](https://github.com/Goyk/C2#03-c2%E9%A1%B9%E7%9B%AE)
*   [04-C2开发](https://github.com/Goyk/C2#04-c2%E5%BC%80%E5%8F%91)
*   [05-C2免杀](https://github.com/Goyk/C2#05-c2%E5%85%8D%E6%9D%80)
*   [06-C2参考](https://github.com/Goyk/C2#06-c2%E5%8F%82%E8%80%83)

## 01-C2资源

[](https://github.com/Getshell/C2#01-c2%E8%B5%84%E6%BA%90)

*   [https://github.com/tcostam/awesome-command-control](https://github.com/tcostam/awesome-command-control)
*   [https://github.com/Ignitetechnologies/Command-Control](https://github.com/Ignitetechnologies/Command-Control)

一、基础书籍

二、视频资源

*    [https://www.youtube.com/watch?v=eTA7weRp2yk](https://www.youtube.com/watch?v=eTA7weRp2yk)

三、其他资源

*    [https://github.com/ProfessionallyEvil/C4](https://github.com/ProfessionallyEvil/C4)
*    [https://github.com/JAYMONSECURITY/JMSec-Agent-RTO](https://github.com/JAYMONSECURITY/JMSec-Agent-RTO)
*    [https://github.com/timb-machine/linux-malware](https://github.com/timb-machine/linux-malware)
*    [https://bbs.pediy.com/thread-273930.htm](https://bbs.pediy.com/thread-273930.htm)
*    [https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc](https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc)
*    [https://www.aqniu.com/vendor/93864.html](https://www.aqniu.com/vendor/93864.html)
*    [https://0xrick.github.io/misc/c2/](https://0xrick.github.io/misc/c2/)
*    [https://github.com/ZeroMemoryEx/C2-Hunter](https://github.com/ZeroMemoryEx/C2-Hunter)

## 02-C2原理

[](https://github.com/Getshell/C2#02-c2%E5%8E%9F%E7%90%86)

*   C2是什么？远控是什么？流量隧道是什么？C2=远控+流量隧道？
*   优秀的C2是什么？
*   Webshell管理工具算不算C2？可以执行命令的就算？
*   理想的C2有什么特征？图形化/自带免杀/匿名隐藏/......
*   远控只是C2的最基本的功能，未来的C2具备自我意识！

## 03-C2项目

[](https://github.com/Getshell/C2#03-c2%E9%A1%B9%E7%9B%AE)

*   [https://github.com/topics/c2](https://github.com/topics/c2)
*   [https://github.com/search?q=Command+and+Control](https://github.com/search?q=Command+and+Control)
*   [https://github.com/topics/command-and-control](https://github.com/topics/command-and-control)
*   [https://github.com/search?q=C2+frameworks](https://github.com/search?q=C2+frameworks)
*   [https://github.com/topics/rat](https://github.com/topics/rat)
*   [https://github.com/search?q=RAT](https://github.com/search?q=RAT)
*   [https://github.com/alphaSeclab/awesome-rat](https://github.com/alphaSeclab/awesome-rat)
*   [https://github.com/killvxk/awesome-C2](https://github.com/killvxk/awesome-C2)

一、Golang

*    [https://github.com/TerminalJockey/Kudzu](https://github.com/TerminalJockey/Kudzu)
*    [https://github.com/BishopFox/sliver](https://github.com/BishopFox/sliver)
*    [https://github.com/Ne0nd0g/merlin](https://github.com/Ne0nd0g/merlin)
*    [https://github.com/tiagorlampert/CHAOS](https://github.com/tiagorlampert/CHAOS)
*    [https://github.com/Ne0nd0g/merlin-agent](https://github.com/Ne0nd0g/merlin-agent)
*    [https://github.com/njcx/gocmd](https://github.com/njcx/gocmd)
*    [https://github.com/EngineerBetter/control-tower](https://github.com/EngineerBetter/control-tower)
*    [https://github.com/activecm/rita](https://github.com/activecm/rita)
*    [https://github.com/DeimosC2/DeimosC2](https://github.com/DeimosC2/DeimosC2)
*    [https://github.com/Tylous/SourcePoint](https://github.com/Tylous/SourcePoint)
*    [https://github.com/iimrudy/PrismaController](https://github.com/iimrudy/PrismaController)
*    [https://github.com/timwhitez/Doge-Persistence-Platform](https://github.com/timwhitez/Doge-Persistence-Platform)
*    [https://github.com/mthbernardes/GTRS](https://github.com/mthbernardes/GTRS)
*    [https://github.com/sensepost/godoh](https://github.com/sensepost/godoh)
*    [https://github.com/cyberark/kubesploit](https://github.com/cyberark/kubesploit)
*    [https://github.com/lu4p/ToRat](https://github.com/lu4p/ToRat)
*    [https://github.com/lu4p/ToRat\_server](https://github.com/lu4p/ToRat_server)
*    [https://github.com/KCarretto/paragon](https://github.com/KCarretto/paragon)
*    [https://github.com/degenerat3/meteor](https://github.com/degenerat3/meteor)
*    [https://github.com/angus-y/PyIris-backdoor](https://github.com/angus-y/PyIris-backdoor)
*    [https://github.com/aminaxx/bossbash](https://github.com/aminaxx/bossbash)
*    [https://github.com/geemion/Khepri](https://github.com/geemion/Khepri)
*    [https://github.com/elleven11/pantegana](https://github.com/elleven11/pantegana)
*    [https://github.com/maxlandon/wiregost](https://github.com/maxlandon/wiregost)
*    [https://github.com/CMatri/MeetC2](https://github.com/CMatri/MeetC2)
*    [https://github.com/phil-fly/generate](https://github.com/phil-fly/generate)
*    [https://github.com/msoap/shell2http](https://github.com/msoap/shell2http)
*    [https://github.com/Maka8ka/NGLite](https://github.com/Maka8ka/NGLite)
*    [https://github.com/veo/vshell](https://github.com/veo/vshell)
*    [https://github.com/kgretzky/evilginx2](https://github.com/kgretzky/evilginx2)
*    [https://github.com/EkiXu/reverse-shell-manager](https://github.com/EkiXu/reverse-shell-manager)
*    [https://github.com/looCiprian/GC2-sheet](https://github.com/looCiprian/GC2-sheet)
*    [https://github.com/whitehatnote/BlueShell](https://github.com/whitehatnote/BlueShell)
*    [https://github.com/Binject/shellcode](https://github.com/Binject/shellcode)
*    [https://github.com/sairson/SecShell](https://github.com/sairson/SecShell)
*    [https://github.com/fcre1938/Ortau](https://github.com/fcre1938/Ortau)
*    [https://github.com/jm33-m0/emp3r0r](https://github.com/jm33-m0/emp3r0r)
*    [https://github.com/ssut/payload-dumper-go](https://github.com/ssut/payload-dumper-go)
*    [https://github.com/webxscan/linux\_rat](https://github.com/webxscan/linux_rat)
*    [https://github.com/0x1a8510f2/wraith](https://github.com/0x1a8510f2/wraith)
*    [https://github.com/FrenchCisco/RATel](https://github.com/FrenchCisco/RATel)
*    [https://github.com/sairson/sabathe](https://github.com/sairson/sabathe)
*    [https://github.com/aleenzz/BeggarC2](https://github.com/aleenzz/BeggarC2)
*    [https://github.com/mosajjal/dnspot](https://github.com/mosajjal/dnspot)
*    [https://github.com/kensh1ro/Willie-C2](https://github.com/kensh1ro/Willie-C2)
*    [https://github.com/TRYblog/C2\_Demo](https://github.com/TRYblog/C2_Demo)
*    [https://github.com/jkstack/natpass](https://github.com/jkstack/natpass)
*    [https://github.com/hudangwei/natpass](https://github.com/hudangwei/natpass)
*    [https://github.com/MythicAgents/tetanus](https://github.com/MythicAgents/tetanus)
*    [https://github.com/Phuong39/Ortau](https://github.com/Phuong39/Ortau)
*    [https://github.com/wraith-labs/wraith](https://github.com/wraith-labs/wraith)
*    [https://github.com/wikiZ/RedGuard](https://github.com/wikiZ/RedGuard)
*    [https://github.com/burpheart/dnsc2](https://github.com/burpheart/dnsc2)
*    [https://github.com/newbe3three/gotoexec](https://github.com/newbe3three/gotoexec)
*    [https://github.com/BradHacker/titan](https://github.com/BradHacker/titan)
*    [https://github.com/YDHCUI/manjusaka](https://github.com/YDHCUI/manjusaka)
*    [https://github.com/D00Movenok/goMalleable](https://github.com/D00Movenok/goMalleable)
*    [https://github.com/Ptkatz/OrcaC2](https://github.com/Ptkatz/OrcaC2)
*    [https://github.com/WithSecureLabs/C3](https://github.com/WithSecureLabs/C3)
*    [https://github.com/InjectionSoftwareandSecurityLLC/lupo](https://github.com/InjectionSoftwareandSecurityLLC/lupo)
*    [https://github.com/Enelg52/KittyStager](https://github.com/Enelg52/KittyStager)
*    [https://github.com/grines/goc2](https://github.com/grines/goc2)
*    [https://github.com/SpenserCai/DRat](https://github.com/SpenserCai/DRat)
*    [https://github.com/HavocFramework/Havoc](https://github.com/HavocFramework/Havoc)
*    [https://github.com/HavocFramework/Talon](https://github.com/HavocFramework/Talon)
*    [https://github.com/0xTriboulet/Revenant](https://github.com/0xTriboulet/Revenant)
*    [https://github.com/xiao-zhu-zhu/noterce](https://github.com/xiao-zhu-zhu/noterce)
*    [https://github.com/LsdDance/Homo-Network](https://github.com/LsdDance/Homo-Network)
*    [https://github.com/dobin/antnium](https://github.com/dobin/antnium)
*    [https://github.com/dollarkillerx/civetcat](https://github.com/dollarkillerx/civetcat)
*    [https://github.com/hxdyjx/remote](https://github.com/hxdyjx/remote)
*    [https://github.com/AuFeng111/linux\_c2](https://github.com/AuFeng111/linux_c2)
*    [https://github.com/gatariee/Winton](https://github.com/gatariee/Winton)
*    [https://github.com/ClarkQAQ/nrat](https://github.com/ClarkQAQ/nrat)
*    [https://github.com/iammaguire/MeetC2](https://github.com/iammaguire/MeetC2)

二、Python

*    [https://github.com/FunnyWolf/Viper](https://github.com/FunnyWolf/Viper)
*    [https://github.com/its-a-feature/Mythic](https://github.com/its-a-feature/Mythic)
*    [https://github.com/Arno0x/WSC2](https://github.com/Arno0x/WSC2)
*    [https://github.com/r00t-3xp10it/venom](https://github.com/r00t-3xp10it/venom)
*    [https://github.com/Coalfire-Research/Slackor](https://github.com/Coalfire-Research/Slackor)
*    [https://github.com/maldevel/canisrufus](https://github.com/maldevel/canisrufus)
*    [https://github.com/Ziconius/FudgeC2](https://github.com/Ziconius/FudgeC2)
*    [https://github.com/0x09AL/DNS-Persist](https://github.com/0x09AL/DNS-Persist)
*    [https://github.com/byt3bl33d3r/SILENTTRINITY](https://github.com/byt3bl33d3r/SILENTTRINITY)
*    [https://github.com/UnkL4b/BabyShark](https://github.com/UnkL4b/BabyShark)
*    [https://github.com/th3r4ven/Bifrost](https://github.com/th3r4ven/Bifrost)
*    [https://github.com/0xGhazy/F4T3H-WinC2](https://github.com/0xGhazy/F4T3H-WinC2)
*    [https://github.com/m8r0wn/transportc2](https://github.com/m8r0wn/transportc2)
*    [https://github.com/mitre/caldera](https://github.com/mitre/caldera)
*    [https://github.com/h0mbre/Dali](https://github.com/h0mbre/Dali)
*    [https://github.com/byt3bl33d3r/SILENTTRINITY](https://github.com/byt3bl33d3r/SILENTTRINITY)
*    [https://github.com/Telefonica/ibombshell](https://github.com/Telefonica/ibombshell)
*    [https://github.com/zerosum0x0/koadic](https://github.com/zerosum0x0/koadic)
*    [https://github.com/Marten4n6/EvilOSX](https://github.com/Marten4n6/EvilOSX)
*    [https://github.com/mhaskar/Octopus](https://github.com/mhaskar/Octopus)
*    [https://github.com/AdrianVollmer/PowerHub](https://github.com/AdrianVollmer/PowerHub)
*    [https://github.com/slyd0g/SK8PARK](https://github.com/slyd0g/SK8PARK)
*    [https://github.com/trustedsec/trevorc2](https://github.com/trustedsec/trevorc2)
*    [https://github.com/n1nj4sec/pupy](https://github.com/n1nj4sec/pupy)
*    [https://github.com/neoneggplant/EggShell](https://github.com/neoneggplant/EggShell)
*    [https://github.com/nil0x42/phpsploit](https://github.com/nil0x42/phpsploit)
*    [https://github.com/loseys/BlackMamba](https://github.com/loseys/BlackMamba)
*    [https://github.com/Coalfire-Research/Slackor](https://github.com/Coalfire-Research/Slackor)
*    [https://github.com/daanzu/kaldi-active-grammar](https://github.com/daanzu/kaldi-active-grammar)
*    [https://github.com/KCarretto/Arsenal](https://github.com/KCarretto/Arsenal)
*    [https://github.com/PushpenderIndia/nekros](https://github.com/PushpenderIndia/nekros)
*    [https://github.com/MythicAgents/venus](https://github.com/MythicAgents/venus)
*    [https://github.com/tanc7/dark-lord-obama](https://github.com/tanc7/dark-lord-obama)
*    [https://github.com/MythicAgents/Medusa](https://github.com/MythicAgents/Medusa)
*    [https://github.com/MythicAgents/merlin](https://github.com/MythicAgents/merlin)
*    [https://github.com/MythicAgents/venus](https://github.com/MythicAgents/venus)
*    [https://github.com/NullCode13/NullRAT](https://github.com/NullCode13/NullRAT)
*    [https://github.com/Ba-hub/GhostRat](https://github.com/Ba-hub/GhostRat)
*    [https://github.com/pucarasec/zuthaka](https://github.com/pucarasec/zuthaka)
*    [https://github.com/Cr4sh/MicroBackdoor](https://github.com/Cr4sh/MicroBackdoor)
*    [https://github.com/gl4ssesbo1/Nebula](https://github.com/gl4ssesbo1/Nebula)
*    [https://github.com/reveng007/C2\_Server](https://github.com/reveng007/C2_Server)
*    [https://github.com/alysif/SimpleRAT](https://github.com/alysif/SimpleRAT)
*    [https://github.com/bigb0sss/kurosaki-C2](https://github.com/bigb0sss/kurosaki-C2)
*    [https://github.com/FortyNorthSecurity/C2concealer](https://github.com/FortyNorthSecurity/C2concealer)
*    [https://github.com/Ph3nX-Z/WebShell-C2](https://github.com/Ph3nX-Z/WebShell-C2)
*    [https://github.com/Rvn0xsy/Linco2](https://github.com/Rvn0xsy/Linco2)
*    [https://github.com/mycve/WinController](https://github.com/mycve/WinController)
*    [https://github.com/t3hbb/NSGenCS](https://github.com/t3hbb/NSGenCS)
*    [https://github.com/wavestone-cdt/abaddon](https://github.com/wavestone-cdt/abaddon)
*    [https://github.com/hash3liZer/SillyRAT](https://github.com/hash3liZer/SillyRAT)
*    [https://github.com/lapolis/palinka\_c2](https://github.com/lapolis/palinka_c2)
*    [https://github.com/mycve/TerminalController](https://github.com/mycve/TerminalController)
*    [https://github.com/nathanlopez/Stitch](https://github.com/nathanlopez/Stitch)
*    [https://github.com/5alt/ZeroRAT](https://github.com/5alt/ZeroRAT)
*    [https://github.com/3ct0s/disctopia-c2](https://github.com/3ct0s/disctopia-c2)
*    [https://github.com/epinna/weevely3](https://github.com/epinna/weevely3)
*    [https://github.com/t3l3machus/hoaxshell](https://github.com/t3l3machus/hoaxshell)
*    [https://github.com/SaumyajeetDas/GodGenesis](https://github.com/SaumyajeetDas/GodGenesis)
*    [https://github.com/safesploit/PythonRAT](https://github.com/safesploit/PythonRAT)
*    [https://github.com/doudoudedi/hackEmbedded](https://github.com/doudoudedi/hackEmbedded)
*    [https://github.com/screamz2k/PhoenixC2](https://github.com/screamz2k/PhoenixC2)
*    [https://github.com/felixweyne/imaginaryC2](https://github.com/felixweyne/imaginaryC2)
*    [https://github.com/XiaoliChan/RedCaddy](https://github.com/XiaoliChan/RedCaddy)
*    [https://github.com/MiBaLToALeX/ShellOrd](https://github.com/MiBaLToALeX/ShellOrd)
*    [https://github.com/t3l3machus/Villain](https://github.com/t3l3machus/Villain)

三、Java

*    [https://github.com/Cobalt-Strike](https://github.com/Cobalt-Strike)
*    [https://github.com/LSTS/neptus](https://github.com/LSTS/neptus)
*    [https://github.com/Ramos-dev/OSSTunnel](https://github.com/Ramos-dev/OSSTunnel)
*    [https://github.com/swagkarna/Rafel-Rat](https://github.com/swagkarna/Rafel-Rat)
*    [https://github.com/Kr9jd/HotRAT](https://github.com/Kr9jd/HotRAT)

四、C&C#&C++

*    [https://github.com/4g3nt47/Striker](https://github.com/4g3nt47/Striker)
*    [https://github.com/rasta-mouse/SharpC2](https://github.com/rasta-mouse/SharpC2)
*    [https://github.com/sf197/Telegra\_Csharp\_C2](https://github.com/sf197/Telegra_Csharp_C2)
*    [https://github.com/NYAN-x-CAT/AsyncRAT-C-Sharp](https://github.com/NYAN-x-CAT/AsyncRAT-C-Sharp)
*    [https://github.com/cobbr/Covenant](https://github.com/cobbr/Covenant)
*    [https://github.com/onSec-fr/Http-Asynchronous-Reverse-Shell](https://github.com/onSec-fr/Http-Asynchronous-Reverse-Shell)
*    [https://github.com/quasar/Quasar](https://github.com/quasar/Quasar)
*    [https://github.com/fozavci/petaqc2](https://github.com/fozavci/petaqc2)
*    [https://github.com/Raffy27/OrionPanel](https://github.com/Raffy27/OrionPanel)
*    [https://github.com/uvzz/IERat](https://github.com/uvzz/IERat)
*    [https://github.com/qwqdanchun/DcRat](https://github.com/qwqdanchun/DcRat)
*    [https://github.com/moom825/xeno-rat](https://github.com/moom825/xeno-rat)
*    [https://github.com/ryhanson/ExternalC2](https://github.com/ryhanson/ExternalC2)
*    [https://github.com/sogonsec/ViolentFungus-C2](https://github.com/sogonsec/ViolentFungus-C2)
*    [https://github.com/xdnice/PCShare](https://github.com/xdnice/PCShare)
*    [https://github.com/sysrom/DcRatCHS](https://github.com/sysrom/DcRatCHS)
*    [https://github.com/A-D-Team/SharpMemshell](https://github.com/A-D-Team/SharpMemshell)
*    [https://github.com/void-stack/Orcus-1.9.1-src](https://github.com/void-stack/Orcus-1.9.1-src)
*    [https://github.com/FULLSHADE/WARFOX-C2](https://github.com/FULLSHADE/WARFOX-C2)
*    [https://github.com/antonioCoco/ConPtyShell](https://github.com/antonioCoco/ConPtyShell)
*    [https://github.com/Gr1mmie/AtlasC2](https://github.com/Gr1mmie/AtlasC2)
*    [https://github.com/FSecureLABS/C3](https://github.com/FSecureLABS/C3)
*    [https://github.com/monoxgas/FlyingAFalseFlag](https://github.com/monoxgas/FlyingAFalseFlag)
*    [https://github.com/SafeBreach-Labs/pinjectra](https://github.com/SafeBreach-Labs/pinjectra)
*    [https://github.com/bats3c/shad0w](https://github.com/bats3c/shad0w)
*    [https://github.com/iagox86/dnscat2](https://github.com/iagox86/dnscat2)
*    [https://github.com/bigBestWay/dnstunnel](https://github.com/bigBestWay/dnstunnel)
*    [https://github.com/pwn1sher/uuid-loader](https://github.com/pwn1sher/uuid-loader)
*    [https://github.com/h3xduck/TripleCross](https://github.com/h3xduck/TripleCross)
*    [https://github.com/capt-meelo/laZzzy](https://github.com/capt-meelo/laZzzy)
*    [https://github.com/TheD1rkMtr/GithubC2](https://github.com/TheD1rkMtr/GithubC2)
*    [https://github.com/SecurityNo1/Gh0st2023](https://github.com/SecurityNo1/Gh0st2023)
*    [https://github.com/DragoQCC/HardHatC2](https://github.com/DragoQCC/HardHatC2)
*    [https://github.com/Idov31/Nidhogg](https://github.com/Idov31/Nidhogg)
*    [https://github.com/Idov31/Sandman](https://github.com/Idov31/Sandman)
*    [https://github.com/satadriver/myLittleBear](https://github.com/satadriver/myLittleBear)
*    [https://github.com/DarkCoderSc/SharpFtpC2](https://github.com/DarkCoderSc/SharpFtpC2)
*    [https://github.com/r3nhat/GRAT2](https://github.com/r3nhat/GRAT2)
*    [https://github.com/F-Society-Freaks/AndroSpy](https://github.com/F-Society-Freaks/AndroSpy)
*    [https://github.com/DannyTheSloth/VanillaRAT](https://github.com/DannyTheSloth/VanillaRAT)
*    [https://github.com/NYAN-x-CAT/Mass-RAT](https://github.com/NYAN-x-CAT/Mass-RAT)
*    [https://github.com/p3nt4/Nuages](https://github.com/p3nt4/Nuages)
*    [https://github.com/enkomio/AlanFramework](https://github.com/enkomio/AlanFramework)
*    [https://github.com/HackerCalico/Magic\_C2](https://github.com/HackerCalico/Magic_C2)
*    [https://github.com/iyzyi/MUA-Remote-Access-Trojan-V2](https://github.com/iyzyi/MUA-Remote-Access-Trojan-V2)

五、Rust

*    [https://github.com/postrequest/link](https://github.com/postrequest/link)
*    [https://github.com/b23r0/Heroinn](https://github.com/b23r0/Heroinn)
*    [https://github.com/b1tg/Ox-C2](https://github.com/b1tg/Ox-C2)

六、Nim

*    [https://github.com/d4rckh/nimc2](https://github.com/d4rckh/nimc2)
*    [https://github.com/chvancooten/NimPlant](https://github.com/chvancooten/NimPlant)
*    [https://github.com/itaymigdal/Nimbo-C2](https://github.com/itaymigdal/Nimbo-C2)

七、PHP

*    [https://github.com/EnginDemirbilek/NorthStarC2](https://github.com/EnginDemirbilek/NorthStarC2)

八、Powershell

*    [https://github.com/ahmedkhlief/Ninja](https://github.com/ahmedkhlief/Ninja)
*    [https://github.com/BC-SECURITY/Empire](https://github.com/BC-SECURITY/Empire)
*    [https://github.com/nettitude/PoshC2](https://github.com/nettitude/PoshC2)
*    [https://github.com/r00t-3xp10it/meterpeter](https://github.com/r00t-3xp10it/meterpeter)
*    [https://github.com/xRET2pwn/PickleC2](https://github.com/xRET2pwn/PickleC2)
*    [https://github.com/alexfrancow/badusb\_botnet](https://github.com/alexfrancow/badusb_botnet)
*    [https://github.com/Raffy27/OrionServer](https://github.com/Raffy27/OrionServer)
*    [https://github.com/JoelGMSec/PSRansom](https://github.com/JoelGMSec/PSRansom)

九、Other

*    [https://github.com/rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework)
*    [https://github.com/0x727/MetasploitCoop\_0x727](https://github.com/0x727/MetasploitCoop_0x727)
*    [https://github.com/Project-Prismatica/Prismatica](https://github.com/Project-Prismatica/Prismatica)
*    [https://github.com/jephthai/EvilVM](https://github.com/jephthai/EvilVM)
*    [https://github.com/KINGSABRI/chkdfront](https://github.com/KINGSABRI/chkdfront)
*    [https://github.com/Raffy27/OrionBot](https://github.com/Raffy27/OrionBot)
*    [https://github.com/MisterTea/EternalTerminal](https://github.com/MisterTea/EternalTerminal)
*    [https://github.com/sneakerhax/C2PE](https://github.com/sneakerhax/C2PE)
*    [https://github.com/0x727/SchTask\_0x727](https://github.com/0x727/SchTask_0x727)
*    [https://github.com/preludeorg/community](https://github.com/preludeorg/community)
*    [https://github.com/Arno0x/DBC2](https://github.com/Arno0x/DBC2)
*    [https://github.com/lcvvvv/backway](https://github.com/lcvvvv/backway)
*    [https://github.com/AlphabugX/nopen](https://github.com/AlphabugX/nopen)
*    [https://github.com/Tomiwa-Ot/moukthar](https://github.com/Tomiwa-Ot/moukthar)
*    [https://github.com/aplyc1a/NTPShell](https://github.com/aplyc1a/NTPShell)
*    [https://github.com/wraith-labs/wraith-dcc2](https://github.com/wraith-labs/wraith-dcc2)
*    [https://github.com/yzddmr6/Java-Shellcode-Loader](https://github.com/yzddmr6/Java-Shellcode-Loader)
*    [https://github.com/FlyfishSec/rsGen](https://github.com/FlyfishSec/rsGen)
*    [https://bruteratel.com](https://bruteratel.com/)
*    [https://github.com/JohnHammond/c2c2](https://github.com/JohnHammond/c2c2)
*    [https://github.com/tdragon6/Supershell](https://github.com/tdragon6/Supershell)
*    [https://github.com/INotGreen/XiebroC2](https://github.com/INotGreen/XiebroC2)

## 04-C2开发

[](https://github.com/Getshell/C2#04-c2%E5%BC%80%E5%8F%91)

一、C2原理

二、C2加密

## 05-C2免杀

[](https://github.com/Getshell/C2#05-c2%E5%85%8D%E6%9D%80)

## 06-C2参考

[](https://github.com/Getshell/C2#06-c2%E5%8F%82%E8%80%83)

*   [https://thestack.technology/from-c2-to-c3](https://thestack.technology/from-c2-to-c3)
*   [https://www.foregenix.com/blog/a-first-look-at-todays-command-and-control-frameworks](https://www.foregenix.com/blog/a-first-look-at-todays-command-and-control-frameworks)
*   [https://www.thec2matrix.com](https://www.thec2matrix.com/)
*   [http://ask.thec2matrix.com](http://ask.thec2matrix.com/)
*   [https://threatexpress.com/blogs/2019/c2-agent-comparison](https://threatexpress.com/blogs/2019/c2-agent-comparison)
*   [https://www.varonis.com/blog/what-is-c2](https://www.varonis.com/blog/what-is-c2)
*   [https://www.thec2matrix.com/matrix](https://www.thec2matrix.com/matrix)
*   [https://awesomeopensource.com/projects/c2](https://awesomeopensource.com/projects/c2)

C2的发展和技术分析