Tools

lame-projects/stratum-c2

Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harvesting

softdeadlock/voron-crypto

Voron messenger crypto/protocol library (X3DH-lite + Double Ratchet, group sender-keys, onion transport) — external review requested

tokyoneon/armor

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

0x00-0x00/shellpop

Pop shells like a master.

3xpl01tc0d3r/obfuscator

The program is designed to obfuscate the shellcode.

chaelsoo/nimcrypt

Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.

trustedsec/cs-remote-ops-bof

Remote operations commands implemented using Beacon Object Files

facebookarchive/weasel

DNS covert channel implant for Red Teams.

adaptix-framework/adaptixc2

AdaptixC2 is a highly modular advanced redteam toolkit

zerx0r/dvenom

🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.

voukatas/commander

Python-based command and control framework with encrypted TLS communication, multiple agent support (Python/C), interactive sessions, file transfer,…

icyguider/nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

saadahla/shellcode-hide

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

0xbbuddha/hermes

A Python agent targeting Linux for Mythic C2

mr-un1k0d3r/thundershell

Python / C# Unmanaged PowerShell based RAT

whichbuffer/lockbit-black-3.0

Ransomware source code artifact for analyzing encryption routines, payload mechanics, and building detection and incident-response countermeasures.

egebalci/amber

Reflective PE packer.

optiv/freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST