C2-下一代RAT

本项目用来收集整理C2的相关内容，包括优秀的C2项目代码或优秀的控制思路等。RAT是一门古老的技术，C2是下一代的RAT！不想拿到全世界控制权限的黑客不是好黑客。作者：0e0w

本项目创建于2021年8月19日，最近的一次更新时间为2024年2月19日。

• 01-C2资源
• 02-C2原理
• 03-C2项目
• 04-C2开发
• 05-C2免杀
• 06-C2参考

01-C2资源

• https://github.com/tcostam/awesome-command-control
• https://github.com/Ignitetechnologies/Command-Control

一、基础书籍

二、视频资源

• [ ] https://www.youtube.com/watch?v=eTA7weRp2yk

三、其他资源

• [ ] https://github.com/ProfessionallyEvil/C4
• [ ] https://github.com/JAYMONSECURITY/JMSec-Agent-RTO
• [ ] https://github.com/timb-machine/linux-malware
• [ ] https://bbs.pediy.com/thread-273930.htm
• [ ] https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc
• [ ] https://www.aqniu.com/vendor/93864.html
• [ ] https://0xrick.github.io/misc/c2/
• [ ] https://github.com/ZeroMemoryEx/C2-Hunter

02-C2原理

• C2是什么？远控是什么？流量隧道是什么？C2=远控+流量隧道？
• 优秀的C2是什么？
• Webshell管理工具算不算C2？可以执行命令的就算？

03-C2项目

• https://github.com/topics/c2
• https://github.com/search?q=Command+and+Control
• https://github.com/topics/command-and-control
• https://github.com/search?q=C2+frameworks
• https://github.com/topics/rat
• https://github.com/search?q=RAT
• https://github.com/alphaSeclab/awesome-rat
• https://github.com/r3nhat/GRAT2
• https://github.com/killvxk/awesome-C2

一、Golang

• [x] https://github.com/TerminalJockey/Kudzu
• [x] https://github.com/BishopFox/sliver
• [x] https://github.com/Ne0nd0g/merlin
• [ ] https://github.com/tiagorlampert/CHAOS
• [ ] https://github.com/Ne0nd0g/merlin-agent
• [ ] https://github.com/njcx/gocmd
• [ ] https://github.com/EngineerBetter/control-tower
• [ ] https://github.com/activecm/rita
• [ ] https://github.com/DeimosC2/DeimosC2
• [ ] https://github.com/Tylous/SourcePoint
• [ ] https://github.com/iimrudy/PrismaController
• [ ] https://github.com/timwhitez/Doge-Persistence-Platform
• [ ] https://github.com/mthbernardes/GTRS
• [ ] https://github.com/sensepost/godoh
• [ ] https://github.com/cyberark/kubesploit
• [ ] https://github.com/lu4p/ToRat
• [ ] https://github.com/KCarretto/paragon
• [ ] https://github.com/lu4p/ToRat_server
• [ ] https://github.com/degenerat3/meteor
• [ ] https://github.com/angus-y/PyIris-backdoor
• [ ] https://github.com/aminaxx/bossbash
• [ ] https://github.com/geemion/Khepri
• [ ] https://github.com/elleven11/pantegana
• [ ] https://github.com/maxlandon/wiregost
• [ ] https://github.com/CMatri/MeetC2
• [ ] https://github.com/phil-fly/generate
• [ ] https://github.com/msoap/shell2http
• [ ] https://github.com/Maka8ka/NGLite
• [ ] https://github.com/veo/vshell
• [ ] https://github.com/kgretzky/evilginx2
• [ ] https://github.com/EkiXu/reverse-shell-manager
• [ ] https://github.com/looCiprian/GC2-sheet
• [ ] https://github.com/whitehatnote/BlueShell
• [ ] https://github.com/Binject/shellcode
• [ ] https://github.com/sairson/SecShell
• [ ] https://github.com/fcre1938/Ortau
• [ ] https://github.com/jm33-m0/emp3r0r
• [ ] https://github.com/ssut/payload-dumper-go
• [ ] https://github.com/webxscan/linux_rat
• [ ] https://github.com/0x1a8510f2/wraith
• [ ] https://github.com/FrenchCisco/RATel
• [ ] https://github.com/sairson/sabathe
• [ ] https://github.com/aleenzz/BeggarC2
• [ ] https://github.com/mosajjal/dnspot
• [ ] https://github.com/kensh1ro/Willie-C2
• [ ] https://github.com/TRYblog/C2_Demo
• [ ] https://github.com/jkstack/natpass
• [ ] https://github.com/hudangwei/natpass
• [ ] https://github.com/MythicAgents/tetanus
• [ ] https://github.com/Phuong39/Ortau
• [ ] https://github.com/wraith-labs/wraith
• [ ] https://github.com/wikiZ/RedGuard
• [ ] https://github.com/burpheart/dnsc2
• [ ] https://github.com/newbe3three/gotoexec
• [ ] https://github.com/BradHacker/titan
• [ ] https://github.com/YDHCUI/manjusaka
• [ ] https://github.com/D00Movenok/goMalleable
• [ ] https://github.com/Ptkatz/OrcaC2
• [ ] https://github.com/WithSecureLabs/C3
• [ ] https://github.com/InjectionSoftwareandSecurityLLC/lupo
• [ ] https://github.com/Enelg52/KittyStager
• [ ] https://github.com/grines/goc2
• [x] https://github.com/SpenserCai/DRat
• [x] https://github.com/HavocFramework/Havoc
• [ ] https://github.com/HavocFramework/Talon
• [ ] https://github.com/0xTriboulet/Revenant
• [ ] https://github.com/xiao-zhu-zhu/noterce
• [ ] https://github.com/LsdDance/Homo-Network
• [ ] https://github.com/dobin/antnium
• [ ] https://github.com/dollarkillerx/civetcat
• [ ] https://github.com/hxdyjx/remote
• [ ] https://github.com/AuFeng111/linux_c2
• [ ] https://github.com/gatariee/Winton

二、Python

• [ ] https://github.com/FunnyWolf/Viper
• [ ] https://github.com/its-a-feature/Mythic
• [ ] https://github.com/p3nt4/Nuages
• [ ] https://github.com/Arno0x/WSC2
• [ ] https://github.com/r00t-3xp10it/venom
• [ ] https://github.com/Coalfire-Research/Slackor
• [ ] https://github.com/maldevel/canisrufus
• [ ] https://github.com/Ziconius/FudgeC2
• [ ] https://github.com/0x09AL/DNS-Persist
• [ ] https://github.com/byt3bl33d3r/SILENTTRINITY
• [ ] https://github.com/UnkL4b/BabyShark
• [ ] https://github.com/th3r4ven/Bifrost
• [ ] https://github.com/0xGhazy/F4T3H-WinC2
• [ ] https://github.com/m8r0wn/transportc2
• [ ] https://github.com/mitre/caldera
• [ ] https://github.com/h0mbre/Dali
• [ ] https://github.com/byt3bl33d3r/SILENTTRINITY
• [ ] https://github.com/Telefonica/ibombshell
• [ ] https://github.com/zerosum0x0/koadic
• [ ] https://github.com/Marten4n6/EvilOSX
• [ ] https://github.com/mhaskar/Octopus
• [ ] https://github.com/AdrianVollmer/PowerHub
• [ ] https://github.com/slyd0g/SK8PARK
• [ ] https://github.com/trustedsec/trevorc2
• [ ] https://github.com/n1nj4sec/pupy
• [ ] https://github.com/neoneggplant/EggShell
• [ ] https://github.com/nil0x42/phpsploit
• [ ] https://github.com/loseys/BlackMamba
• [ ] https://github.com/Coalfire-Research/Slackor
• [ ] https://github.com/daanzu/kaldi-active-grammar
• [ ] https://github.com/KCarretto/Arsenal
• [ ] https://github.com/PushpenderIndia/nekros
• [ ] https://github.com/MythicAgents/venus
• [ ] https://github.com/tanc7/dark-lord-obama
• [ ] https://github.com/MythicAgents/Medusa
• [ ] https://github.com/MythicAgents/merlin
• [ ] https://github.com/MythicAgents/venus
• [ ] https://github.com/NullCode13/NullRAT
• [ ] https://github.com/Ba-hub/GhostRat
• [ ] https://github.com/pucarasec/zuthaka
• [ ] https://github.com/Cr4sh/MicroBackdoor
• [ ] https://github.com/gl4ssesbo1/Nebula
• [ ] https://github.com/reveng007/C2_Server
• [ ] https://github.com/alysif/SimpleRAT
• [ ] https://github.com/bigb0sss/kurosaki-C2
• [ ] https://github.com/FortyNorthSecurity/C2concealer
• [ ] https://github.com/Ph3nX-Z/WebShell-C2
• [ ] https://github.com/Rvn0xsy/Linco2
• [ ] https://github.com/mycve/WinController
• [ ] https://github.com/t3hbb/NSGenCS
• [ ] https://github.com/wavestone-cdt/abaddon
• [ ] https://github.com/hash3liZer/SillyRAT
• [ ] https://github.com/lapolis/palinka_c2
• [ ] https://github.com/mycve/TerminalController
• [ ] https://github.com/nathanlopez/Stitch
• [ ] https://github.com/5alt/ZeroRAT
• [ ] https://github.com/3ct0s/disctopia-c2
• [ ] https://github.com/epinna/weevely3
• [ ] https://github.com/t3l3machus/hoaxshell
• [ ] https://github.com/SaumyajeetDas/GodGenesis
• [ ] https://github.com/safesploit/PythonRAT
• [ ] https://github.com/doudoudedi/hackEmbedded
• [ ] https://github.com/screamz2k/PhoenixC2
• [ ] https://github.com/felixweyne/imaginaryC2
• [ ] https://github.com/XiaoliChan/RedCaddy
• [ ] https://github.com/MiBaLToALeX/ShellOrd
• [ ] https://github.com/t3l3machus/Villain

三、Java

• [ ] https://github.com/Cobalt-Strike
• [ ] https://github.com/LSTS/neptus
• [ ] https://github.com/Ramos-dev/OSSTunnel
• [ ] https://github.com/swagkarna/Rafel-Rat
• [ ] https://github.com/Kr9jd/HotRAT

四、C&C#&C++

• [ ] https://github.com/4g3nt47/Striker
• [ ] https://github.com/rasta-mouse/SharpC2
• [ ] https://github.com/sf197/Telegra_Csharp_C2
• [ ] https://github.com/NYAN-x-CAT/AsyncRAT-C-Sharp
• [ ] https://github.com/cobbr/Covenant
• [ ] https://github.com/onSec-fr/Http-Asynchronous-Reverse-Shell
• [ ] https://github.com/quasar/Quasar
• [ ] https://github.com/fozavci/petaqc2
• [ ] https://github.com/Raffy27/OrionPanel
• [ ] https://github.com/uvzz/IERat
• [ ] https://github.com/qwqdanchun/DcRat
• [ ] https://github.com/ryhanson/ExternalC2
• [ ] https://github.com/sogonsec/ViolentFungus-C2
• [ ] https://github.com/xdnice/PCShare
• [ ] https://github.com/sysrom/DcRatCHS
• [ ] https://github.com/A-D-Team/SharpMemshell
• [ ] https://github.com/void-stack/Orcus-1.9.1-src
• [ ] https://github.com/FULLSHADE/WARFOX-C2
• [ ] https://github.com/antonioCoco/ConPtyShell
• [ ] https://github.com/Gr1mmie/AtlasC2
• [ ] https://github.com/FSecureLABS/C3
• [ ] https://github.com/monoxgas/FlyingAFalseFlag
• [ ] https://github.com/SafeBreach-Labs/pinjectra
• [ ] https://github.com/bats3c/shad0w
• [ ] https://github.com/iagox86/dnscat2
• [ ] https://github.com/bigBestWay/dnstunnel
• [ ] https://github.com/pwn1sher/uuid-loader
• [ ] https://github.com/h3xduck/TripleCross
• [ ] https://github.com/capt-meelo/laZzzy
• [ ] https://github.com/TheD1rkMtr/GithubC2
• [ ] https://github.com/SecurityNo1/Gh0st2023
• [ ] https://github.com/DragoQCC/HardHatC2
• [ ] https://github.com/Idov31/Nidhogg
• [ ] https://github.com/Idov31/Sandman
• [ ] https://github.com/satadriver/myLittleBear
• [ ] https://github.com/DarkCoderSc/SharpFtpC2

五、Rust

• [ ] https://github.com/postrequest/link
• [ ] https://github.com/b23r0/Heroinn
• [ ] https://github.com/b1tg/Ox-C2

六、Nim

• [ ] https://github.com/d4rckh/nimc2
• [ ] https://github.com/chvancooten/NimPlant
• [ ] https://github.com/itaymigdal/Nimbo-C2

七、PHP

• [ ] https://github.com/EnginDemirbilek/NorthStarC2

八、Powershell

• [ ] https://github.com/ahmedkhlief/Ninja
• [ ] https://github.com/BC-SECURITY/Empire
• [ ] https://github.com/nettitude/PoshC2
• [ ] https://github.com/r00t-3xp10it/meterpeter
• [ ] https://github.com/xRET2pwn/PickleC2
• [ ] https://github.com/alexfrancow/badusb_botnet
• [ ] https://github.com/Raffy27/OrionServer
• [ ] https://github.com/JoelGMSec/PSRansom

九、Other

• [ ] https://github.com/rapid7/metasploit-framework
• [ ] https://github.com/0x727/MetasploitCoop_0x727
• [ ] https://github.com/Project-Prismatica/Prismatica
• [ ] https://github.com/jephthai/EvilVM
• [ ] https://github.com/KINGSABRI/chkdfront
• [ ] https://github.com/Raffy27/OrionBot
• [ ] https://github.com/MisterTea/EternalTerminal
• [ ] https://github.com/sneakerhax/C2PE
• [ ] https://github.com/0x727/SchTask_0x727
• [ ] https://github.com/enkomio/AlanFramework
• [ ] https://github.com/preludeorg/community
• [ ] https://github.com/Arno0x/DBC2
• [ ] https://github.com/lcvvvv/backway
• [ ] https://github.com/AlphabugX/nopen
• [ ] https://github.com/Tomiwa-Ot/moukthar
• [ ] https://github.com/aplyc1a/NTPShell
• [ ] https://github.com/wraith-labs/wraith-dcc2
• [ ] https://github.com/yzddmr6/Java-Shellcode-Loader
• [ ] https://github.com/FlyfishSec/rsGen
• [ ] https://bruteratel.com
• [ ] https://github.com/JohnHammond/c2c2
• [ ] https://github.com/tdragon6/Supershell
• [ ] https://github.com/INotGreen/XiebroC2

04-C2开发

一、C2原理

二、C2加密

05-C2免杀

06-C2参考

• https://thestack.technology/from-c2-to-c3
• https://www.foregenix.com/blog/a-first-look-at-todays-command-and-control-frameworks
• https://www.thec2matrix.com
• http://ask.thec2matrix.com
• https://threatexpress.com/blogs/2019/c2-agent-comparison
• https://www.varonis.com/blog/what-is-c2
• https://www.thec2matrix.com/matrix
• https://awesomeopensource.com/projects/c2