C2 Info C2 Matrix Info Language UI Implant Channel Capabilities Detection Support

Working C2-Matrix Actively Maint.

Name License Price GitHub Site Twitter Evaluator Date Version Implementation How-To Slingshot Kali Server Implant Multi-User UI Dark Mode API Windows Linux macOS TCP HTTP HTTP2 HTTP3 DNS DoH ICMP FTP IMAP MAPI SMB LDAP Key Exchange Stego Proxy Aware DomainFront Custom Profile Jitter Hours Kill Date Chaining Logging In Wild ATT&CK Mapping Dashboard SOCKS Support Blog Indicators JARM <12 mo Slack Slack Members GH Issues Notes
AirStrike NA NA [Link] @q8fawazo Contribute 10/2/2022
Alan Created Commons NA [Link] @s4tan @s4tan 9/10/2021 4 binary .NET C/Asm No No No No Yes No No No Yes No No No No No No No No No No Yes No No No Yes Yes No No No Yes Yes No No All code is executed in memory
Alchimist NA NA [Link]
@TalosSecurity 10/13/2022 Go Yes Web Yes Yes Yes
Ares NA NA [Link] @nas_bench 5/27/2021 N/A Python Python Python No Web Yes and only dark
Yes mode Yes Yes Yes No Yes No No No No No No No No No No None No No No Yes Yes No No No Yes No Yes Yes Yes No
AsyncRAT-C# MIT NA [Link] Contribute 1dd40d40d00040d1dc1dd40d1dd40d3df2d6a0c2caaa0dc59908f0d3602943
No NA 158
AtlasC2 MIT NA [Link]
[Link]
@gr1mmie @Adam_Mashinchi 3/20/2022 C# Yes C# C# CLI Yes
BabyShark NA NA [Link] @UnkL4b @nas_bench 6/8/2021 Beta 1.0 Python Bash No Web Yes and only dark
Nomode No Yes No No Yes No No No No No No No No No No None No No No No No No No No Yes No Yes Yes
Badrats GNU GPL3 NA [Link] @GuhnooPlusLinux Contribute
BlackMamba MIT NA [Link] Contribute Yes
Brute Ratel Commercial $2,500 [Link] @NinjaParanoid @NinjaParanoid 3/19/2021 0.3 binary Golang C, x64 Asm Yes GUI Yes Yes Yes No No Yes Yes No No No No No No No No Yes Yes Yes No Yes Yes Yes Yes No No Yes Yes Yes Yes Yes Yes
Bunraku Apache 2 NA [Link] Contribute
C3 BSD3 NA [Link]
[Link]
@FSecureLabs @ajpc500 6/30/2021 1.3 .NET Core C++ Yes GUI Yes Yes Yes No - hunting
Nofor C3 - No
[Link]
Yes No No No - dropbox
No channel
No - [Link]
No No No Yes Yes Yes No - UNC Yes
share file detection
No- [Link]
No Yes No No Yes Yes No
- Printer C2 detection
No - [Link]
Yes - Yara Rule from FireEye - [Link]
Yes #c3 [Link] 320 - Yara rule
6 for C3 Asana
in-memory
- Dropbox
shellcode
- GoogleDrive
- [Link]
- GitHub - Slack - O365 - LDAP - Printer - Unc Share File - MSSQL - C3 DLL usage (sigma rule) - https
CALDERA Apache 2 NA [Link] @jorgeorchilles 10/6/2019 2 pip3 Yes Python Go Yes Web Yes Yes Yes Yes No Yes No No No No No No No No No None No Yes Yes Yes Yes No No Yes Yes No Yes Yes Yes Yes [Link] 181
Callidus GNU GPL3 NA [Link] @chiragsavla94 @chiragsavla94 5/8/2020 Yes .Net Core .Net Core No CLI No Yes No No Yes No No No No No No No No No None No No No No No No No No No No No No O365 services: Outlook, OneNote, Teams
CHAOS BSD3 NA [Link] @tiagorlampert @leekirkpatrick4 5/14/2020 3 Go No Go Go No CLI No Yes Yes Yes Yes No No No No No No No No No No No No No No No No No No No No No No Yes Yes No NA 13
Cobalt Strike Commercial $5,900 [Link] @TimMedin 11/20/2019 3.14 binary Java C Yes GUI No Yes No No Yes Yes No No Yes Yes No No No No Yes Yes No Yes Yes Yes Yes No Yes Yes Yes Yes Yes Yes Yes Yes 07d14d16d21d21d07c42d41d00041d24a458a375eef0c576d23a7bab9a9fb1
Yes No NA NA
Covenant GNU GPL3 NA [Link]
[Link] @cobbr_io @jorgeorchilles 10/6/2019 0.3 Docker Yes Yes Yes C# C# Yes Web Yes Yes Yes No No No Yes No No No No No No No No Yes Encrypted Key Exchange No Yes Yes Yes Yes No Yes Yes Yes No Yes Yes Yes #covenant [Link] 665 108
DaaC2 NA NA [Link] Contribute
Dali MIT NA [Link]
[Link]
@h0mbre_ @jorgeorchilles 12/24/2019 POC pip3 Python Python No CLI No BYOI BYOI BYOI No Yes No No No No No No No No No AES Yes No No No No No No No No No No Yes No NA 0 Uses Imgur
DarkFinger MIT NA [Link] @hyp3rlinx @nas_bench 7/4/2021 POC Python Python Batch No No No No Yes No No Yes No No No No No No No No No No No No No Yes No No Yes No No No No No No No Yes
DBC2 NA NA [Link] Contribute No Dropbox
DcRat MIT NA [Link] @qwqdanchun Contribute Yes No No
DeimosC2 MIT NA [Link] @CharlesDardaman @jasc22 9/17/2020 1.1.0 Beta Golang Golang Golang Yes Web Yes Yes Yes Yes Yes Yes Yes No No No Yes No No No No No Encrypted Key Exchange No Yes No No Yes No Yes Yes Yes No No Yes 00000000000000000041d00000041d9535d5979f591ae8e547c5e5743e5b64
Yes No NA 9
Disctopia GNU GPL3 NA [Link] Contribute Yes Yes
Eggshell GNU GPL2 NA [Link] Contribute
emp3r0r MIT NA [Link] Contribute
Empire BSD3 NA [Link] @BCSecurity1 @jorgeorchilles 1/30/2020 3.0.5 [Link] Yes Yes Yes Python PowerShell Yes GUI Yes Yes Yes Yes Yes No Yes No No No No No No No No No Encrypted Key Exchange No Yes Yes Yes Yes Yes Yes No Yes Yes Yes No Yes 0ad0ad0000ad0ad22c42d42d000000088658245da669bb571fc2a62dd80912
Yes #psempire [Link] 1299 61 Dropbox, OneDrive
EvilOSX GNU GPL3 NA [Link] @cabbagesalad2 11/12/2019 7.2.1 pip3 Yes Python Python No GUI No Yes Yes Yes No Yes No No No No No No No No No AES No No No Yes No No No No No No No Yes No NA 89
Faction C2 BSD3 NA Taken down @jorgeorchilles 10/30/2019 NA [Link] Yes Yes Yes .NET .NET Yes Web Yes Yes No No Yes Yes No No No No No No No No No TLS No Yes No Yes Yes No Yes No Yes No Yes No #factionc2 [Link] 203 38
FlyingAFalseFlag GNU GPL3 NA [Link] @jorgeorchilles 11/12/2019 POC pip3 Python C++ No CLI No Yes No No No Yes No No No No No No No No No None No No No No No No No No No No No Yes No NA 1 PostOffice EWS SendGrid & Addendum VirusTotal
FudgeC2 GNU GPL3 NA [Link] @Ziconius @jorgeorchilles 2/11/2020 Beta pip3 Yes Python Powershell Yes Web No Yes No No No Yes No No No No No No No No No None No No No Yes No No Yes No No No Yes Yes #fudgec2 [Link] NA 3
GC2-sheet NA NA [Link] @loogrz Contribute Google Sheets and Drive
gcat BSD2 NA [Link] @byt3bl33d3r Contribute No
GoBot2 MIT NA [Link] Contribute
GodGenesis NA NA [Link] @SaumyajeetDas21 Contribute
godoh GNU GPL3 NA [Link] @leonjza @cabbagesalad2 10/31/2019 1.6 binary Yes Go Go No CLI No Yes Yes Yes No No No No Yes Yes No No No No No None No No No No Yes No No No No No No Yes Yes No NA 1
Google Socks NA NA [Link] No
GRAT2 GNU GPL3 NA [Link] @r3n_hat @r3n_hat 9/1/2021 Beta No No Python C# No CLI No No Yes No No No Yes No No Yes No No No No No No No No No Yes No Yes Yes No No No No No No No Yes No NA 0 Encrypted Communication using XOR
Grim Reaper C2 GNU GPL3 NA [Link] @d4rckh Contribute Previously NimC2
HARS MIT NA [Link] @leekirkpatrick4 3/24/2020 POC python Python C# No CLI No Yes No No No Yes No No No No No No No No No None No Yes No Yes Yes No No No Yes No No Yes Yes No NA 2
Haven Commercial Contact Sales [Link]
[Link] Contribute
Havoc GNU GLP3 NA [Link] @C5pider Contribute 10/2/2022 Golang C Yes GUI Yes Yes Yes Yes No Yes No No No No No No No No No No No Yes Yes Yes Yes No Yes Yes Yes Yes No No Yes Yes
Heroinn GNU GPL3 NA [Link] Contribute
HTTP-RevShell GNU GPL3 NA [Link] @3v4Si0N Contribute
ibombshell GNU GPL3 NA [Link] @jorgeorchilles 11/12/2019 0.0.3b pip3 Yes Yes Python PowerShell No GUI No Yes Yes Yes No Yes No No No No No No No No No None No Yes No No No No No No No No No Yes No NA 5
INNUENDO Commercial Contact Sales [Link] @daveaitel 11/11/2019 1.7 [Link] Python Python Yes Web Yes Yes Yes Yes No Yes No No Yes No Yes Yes Yes Yes Yes Encrypted Key Exchange No Yes Yes Yes Yes No No Yes Yes No Yes Yes No NA NA
Khepri Apache 2 NA [Link] Contribute
Koadic C3 Apache 2 NA [Link] @jorgeorchilles 9/27/2019 0xA (10) pip3 Yes Yes Yes Python JScript/VBScript No GUI No Yes No No No Yes No No No No No No No No No None No No No No No No Yes No Yes Yes Yes No Yes Yes No NA 94 Requires valid cert for HTTPS
Link GNU GPL3 NA [Link] Contribute
LOLBITS GNU GPL3 NA [Link] @Kurosh2907 Contribute
MacC2 BSD3 NA [Link] Contribute 2ad2ad0002ad2ad22c42d42d000000faabb8fd156aa8b4d8a37853e1063261
MacShellSwift NA NA [Link] @cedowens @Adam_Mashinchi11/13/2019 N/A python Yes Python Swift No CLI No No No Yes No Yes No No No No No No No No No TLS No No No No No No No No No No No 2ad000000000000000000000000000eeebf944d0b023a00f510f06a29b4f46
Yes No NA 0
MACE NA NA [Link] Contribute Python No CLI
MeetC2 NA NA [Link] Contribute
Merlin GNU GPL3 NA [Link]
[Link]
@merlin_c2 @jorgeorchilles 11/4/2019 0.8.0 Binary Yes Yes Yes Go Go No CLI No Yes Yes Yes No Yes Yes Yes No No No No No No No aPAKE OPAQUE No No Yes No Yes No Yes No Yes No No Yes 29d21b20d29d29d21c41d21b21b41d494e0df9532e75299f15ba73156cee38
Yes #merlin [Link] 278 57 Gandalf: [Link]
Metasploit BSD3 NA [Link]
[Link] @metasploit @busterbcook 12/4/2019 5.0.62 Ruby Ruby C/Java/PHP/Python Yes CLI Yes Yes Yes Yes Yes Yes No No No No No No No No Yes RSA No Yes Yes No No No No Yes Yes No No Yes Yes 07d14d16d21d21d00042d43d000000aa99ce74e2c6d013c745aa52b5cc042d
Yes [Link] 4653 3953
Meteor GNU GPL3 NA [Link] Contribute
Meterpeter NA NA [Link] Contribute No Yes No NA 0
MicroBackdoor GNU GPL3 NA [Link] @d_olex Contribute
MikeC2 MIT NA [Link]
@mlgualtieri Contribute 5/25/2021 C# / PHP No No No PHP C# No CLI No No Yes No No Yes Yes No No No No No No No No No No No No No No Yes No Yes No No No No No No No No No The MikeC2 agent is best loaded with MikeDrop
MiniC2 NA NA [Link] @ConsoleRick Contribute
Mistica GNU GPL3 NA [Link] Contribute
Manjusaka NA NA [Link] Contribute [Link]
Mythic BSD3 NA [Link]
[Link] @its_a_feature_ @jorgeorchilles 10/6/2019 1.3 Docker Yes N/A
Python
(Mythic is the handler/controller, not the Yes
implant) Web Yes Yes Yes Yes No Yes No No No No No No No No No Encrypted Key Exchange No No Yes Yes No No No No Yes No Yes 2ad2ad0002ad2ad00042d42d000000ad9bf51cc3f5a1e29eecb81d0c7b06eb
Yes #ApFell [Link] 180 14
Mythic-Apollo BSD3 NA [Link] @djhohnstein Contribute .NET Yes Implant for Mythic
Mythic-Medusa NA NA [Link] @ajpc500 Contribute Python Yes
Nebula MIT NA [Link] Contribute
Nighthawk Commercial £22,500 [Link]
@MDSecLabs @domchell 12/16/2021 0.1 Binary Python C++ Yes GUI No Yes Yes No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No Yes Yes Yes Yes No Yes Yes Yes Yes No Yes Yes No Yes Yes NA NA
Nimbo-C2 MIT NA [Link] Contribute Python Nim
Ninja GNU GPL3 NA [Link]
[Link]
@leekirkpatrick4 4/3/2020 Beta python Python C#/PowerShell Yes CLI No Yes No No No Yes No No No No No No No No No AES No Yes No Yes No No No No Yes No No Yes Yes No NA 4 Built on top of leaked MuddyC3
NorthStarC2 GNU GPL3 NA [Link] Contribute
Nuages NA NA [Link] @xp3nt4 @xp3nt4 11/12/2019 1 [Link] Yes Python C# Yes Cli Yes Yes Yes Yes No Yes No No Yes No No No No No No AES No Yes No No No No No No No No No Yes No NA 0 Implants can be built and customized easily
Octopus GNU GPL3 NA [Link]
[Link]
@mohammadaskar2 @jorgeorchilles 12/12/2019 v1.0 Beta pip3 Python PowerShell No GUI No Yes No No No Yes No No No No No No No No No AES No No No Yes No No No No No Yes Yes No Yes No NA 3
OffensiveNotion MIT NA [Link] @mttaggart @huskyhacksmk
OST Stage 1 Commercial Check Site [Link]
@OutflankNL @MarcOverIP 11/5/2021 SaaS Python C++ Yes GUI Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes, private Focus on Stage 1 type of functionality. Available as part of larger OST offering with multiple initial access and post-ex capabilities
Oyabun C2 Commercial $200 [Link] @redcode_labs Contribute Go Go No CLI No Yes Yes Yes
Palinka NA NA [Link] @l4p0lis Contribute
PetaQ MIT NA [Link] Contribute
PickleC2 NA NA [Link]
[Link]
@RET2_pwn Contribute Python PowerShell
PoshC2 BSD3 NA [Link]
[Link]
@Nettitude_Labs @jorgeorchilles 9/11/2021 7.4.0 [Link] Yes Yes Yes Python PowerShell/C#/Python Yes CLI Yes No Yes Yes Yes No Yes No No No No No No No No Yes TLS No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No Yes 2ad2ad0002ad2ad22c42d42d000000faabb8fd156aa8b4d8a37853e1063261
Yes [Link]
[Link] 44 [Link]
PowerHub MIT NA [Link] @mr_mitm @jorgeorchilles 11/15/2019 1.3 pip3 Yes Yes Python PowerShell Yes Web No Yes No No No Yes No No No No No No No No No TLS No Yes No No No No No No Yes No No Yes No NA 38
Prelude Commercial Check Site [Link]
[Link] @preludeorg @bfuzzy1 1/15/2021 0.9.12 Binary No No No NodeJS Go/Python/JS No GUI Yes Yes Yes Yes Yes Yes Yes No No No No No No No No No No Pre-shared key/TLS No No No No Yes Yes No Yes Yes No Yes Yes No No Yes No N/A 6 Community is free, Professional $50 per user, Enterprise $1,000 a month up to 10 users
Prismatica MIT NA [Link]
[Link] @PPrismatica @0sm0s1z 11/13/2019 0.01 Docker Javascript/Python JScript/.NET/Rust Yes GUI Yes Yes Yes Yes Yes Yes No No No No No No No No No None No Yes No Yes Yes No No Yes Yes No Yes Yes No NA 1
Proton GNU GPL3 NA [Link] @enty8080 Contribute 5 [Link] Python JScript/VBScript No Yes No No No No No No No No No No NA 4
Pupy BSD3 NA [Link] @n1nj4sec Contribute Python Python No CLI No Yes Yes Yes No NA 596
QuasarRAT MIT NA [Link] @leekirkpatrick4 5/20/2020 [Link] C# C# C# No GUI No Yes No No Yes No No No No No No No No No No TLS No No No No No No No No No Yes Yes No Yes Yes No NA 529
RATel MIT NA [Link] Contribute
Red Team Toolkit Commercial $7,000 [Link]
@SilentBreakSec @dmay3r 11/22/2019 2.63 [Link] Python C++ No CLI No Yes No No No Yes No No No No No No No No Yes Encrypted Key Exchange No Yes Yes Yes No No No Yes Yes No No Yes No NA NA
RedbloodC2 NA NA [Link] @kira_321k Contribute
RedditC2 GNU GPL3 NA [Link] @kleiton0x7e @t4tch3r_Contribute
RedHerd Framework MIT NA [Link]
[Link] @RedHerdProject Contribute 9/29/2021 0.0.4 JavaScript / Docker [Link] NA Yes Web Yes Yes Yes* Yes* Yes* Yes (SSH) NA NA NA NA NA NA NA NA No Yes** Yes No No (*) Implant refers to the supported OS for the assets. (**) ATT&CK Mapping is easly integrated through custom topics, the default is
redViper NA NA [Link] Contribute No Yes No NA 0
ReverseTCPShell NA NA [Link] @ZHacker13 @jorgeorchilles 12/19/2019 NA PowerShell PowerShell PowerShell No CLI No Yes No No Yes No No No No No No No No No No None No No No No No No No No No No No Yes No No NA 0 Direct, constant TCP connection
sak1to-shell NA NA [Link] Contribute
Sandman NA NA [Link] Contribute
SCYTHE Commercial Contact Sales [Link]
[Link] @scythe_io @Adam_Mashinchi 7/7/2020 3 Binary Python C Yes Web Yes Yes Yes Yes Yes Yes No No Yes No No No No No Yes Curve25519 Yes Yes Yes Yes Yes No Yes Yes Yes No Yes Yes 2ad2ad16d2ad2ad22c42d42d0000006f254909a73bf62f6b28507e9fb451b5
Yes No NA NA
Secret Handshake MIT NA [Link] @turboCodr Contribute
Serpentine MIT NA [Link] Contribute
Shad0w MIT NA [Link] @_batsec_ Contribute No
Shadow Workers MIT NA [Link] Contribute
SharpC2 GNU GPL3 NA [Link]
[Link]
@_RastaMouse @_xpn_Contribute
SharpGmailC2 MIT NA [Link] @reveng007 Contribute
SilentTrinity GNU GPL3 NA [Link] @byt3bl33d3r @0sm0s1z 11/13/2019 0.4.6dev Binary Yes Yes Yes Python Boolang Yes CLI No Yes No No No Yes No No No No No No No No No ECDHE No No Yes No Yes No No No Yes No No No #silenttrinity [Link] 489 67
SK8PARK/RAT NA NA [Link] @slyd0g Contribute Yes Python C++ Yes No Yes No No No No No No No No No Encrypted Key Exchange No Yes No No No NA 0 SK8PARK is server and SK8RAT is implant
Slack-C2Bot NA NA [Link] Contribute Yes Yes Slack
Slackor GNU GPL3 NA [Link] Contribute No
Sliver GNU GPL3 NA [Link] @LittleJoeTables @rkervell
@jorgeorchilles
@bishopfox 11/5/2019 0.0.6 Binary Yes Yes Yes Go Go Yes CLI No Yes Yes Yes Yes Yes No No Yes No No No No No No mTLS No No No No No No No No No Yes No Yes 2ad2ad0002ad2ad00041d2ad2ad41da5207249a18099be84ef3c8811adc883
Yes No NA 131 Good for evasion
SQLC2 BSD3 NA [Link] Contribute
Striker NA NA [Link] @UmarAbdoul Contribute
Throwback GNU GPL2 NA [Link] @SilentBreakSec @malcomvetter 2/24/2020 Aug 2017 shell script Yes php C++ Yes Web No Yes No No No Yes No No No No No No No No No RC4 No Yes No No No No No No No No Yes Yes No No NA 1 No updates in 5 years; web UI not authenticated
ThunderShell GNU GPL3 NA [Link] Contribute
ToRat Unlicense NA [Link] @lu4p3 Contribute
Trevor BSD3 NA [Link] @HackingDave @cabbagesalad2 10/16/2019 1.1 pip3 Yes Python Python/PowerShell No CLI No Yes Yes Yes No Yes No No No No No No No No No AES No No No Yes Yes No No No No No [Link]
No Yes No NA 5
TripleCross GNU GPL3 NA [Link] @h3xduck Contribute
Twittor MIT NA [Link] Contribute No Twitter
Violent Fungus BSD3 NA [Link] Contribute
VirusTotalC2 NA NA [Link] @D1rkMtr Contribute
Void-RAT NA NA [Link] Contribute No No NA
Voodoo Commercial $2,000 [Link] @professor__plum @kevinlustic 2/12/2020 0.2.3 [Link] Python C++ Yes Web No Yes Yes Yes Yes Yes No No No No No No No No No TLS + ChaCha20-Poly1305 No Yes No No Yes No Yes Yes Yes No No Yes [Link] 189 NA Community edition available for evaluation and linked off the main site
WarFox BSD3 NA [Link] Contribute
WEASEL MIT NA [Link] @ucsenoi @jorgeorchilles 12/3/2019 1 pip3 Python Python No CLI No Yes Yes Yes No No No No Yes No No No No No No AES No No No No No No No No No No No Yes Yes No NA 3 Beacons via DNS
Zuthaka BSD3 NA [Link] @pucara Contribute Yes