开源远控/C&C工具

所有收集类项目

RAT

250+ 开源远控/C&C工具，1200+ RAT分析报告\C&C相关文章等。
English Version

开源工具

[5265星][1m] [Py] n1nj4sec/pupy Python编写的远控、后渗透工具，跨平台（Windows, Linux, OSX, Android）

[1147星][6d] [C#] cobbr/covenant Covenant is a collaborative .NET C2 framework for red teamers.
[95星][9d] [C#] cobbr/elite Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
[31星][4m] [C#] cobbr/c2bridge C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.

[332星][12d] [Py] coalfire-research/slackor A Golang implant that uses Slack as a command and control server

[2932星][10m] [C#] quasar/quasarrat Remote Administration Tool for Windows

[1376星][2y] [Py] marten4n6/evilosx An evil RAT (Remote Administration Tool) for macOS / OS X.

[2568星][6m] [Go] ne0nd0g/merlin Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

商业软件

[405星][2y] [C++] vah13/extracttvpasswords tool to extract passwords from TeamViewer memory using Frida
[277星][2y] [C++] gellin/teamviewer_permissions_hook_v1 A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.
[175星][9d] uknowsec/sharpdecryptpwd 对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。
[59星][2y] [Py] attackercan/teamviewer-dumper 从内存中转储TeamViewer ID 和密码
[42星][6d] [C#] v1v1/decryptteamviewer Enumerate and decrypt TeamViewer credentials from Windows registry
[36星][5y] [C++] kkar/teamviewer-dumper-in-cpp Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows.
[25星][5m] [C++] dydtjr1128/remoteassistance-cpp [WIP]RemoteAssistance like TeamViewer(C++)

恶意软件(部分)

[301星][7d] [C++] yuanyuanxiang/simpleremoter 基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能
[273星][7y] [C++] sin5678/gh0st a open source remote administrator tool
[91星][6y] [C++] igh0st/gh0st3.6_src
[90星][1m] [C++] zibility/remote 参考Gh0st源码，实现的一款PC远程协助软件，拥有远程Shell、文件管理、桌面管理、消息发送等功能。
[21星][5m] [C++] holmesian/gh0st-light 精简之后的老东西

[2星][10m] [Py] jacobpimental/nanocore_extractor Extracts nanocore sample from compile AutoIT script

[143星][2y] [Visual Basic .NET] alibawazeeer/rat-njrat-0.7d-modded-source-code NJR
[128星][8d] [Visual Basic] mwsrc/njrat njRAT SRC Extract
[14星][5m] [C#] nyan-x-cat/njrat-0.7d-stub-csharp njRAT C# Stub - Fixed For PowerShell
[3星][2y] [Py] seep1959/njutils A client and chat program for njrat 0.6.4, 0.7d, and 0.7d golden edition.

[21星][2m] [C#] nyan-x-cat/revengerat-stub-cssharp Revenge-RAT C# Stub - Fixed

[28星][7y] [Py] kcreyts/plugxdecoder Decodes PlugX traffic and encrypted/compressed artifacts

2020.02 [talosintelligence] Loda RAT Grows Up

2018.02 [talosintelligence] CannibalRAT targets Brazil

利用公开服务

[648星][1y] [Py] mehulj94/braindamage 使用Telegram做C&C服务器的远控
[330星][8m] [Py] mvrozanti/rat-via-telegram Windows Remote Administration Tool via Telegram
[160星][4y] [Py] blazeinfosec/bt2 使用Telegram 基础设施做C&C 服务器

[658星][4y] [Py] paulsec/twittor A fully featured backdoor that uses Twitter as a C&C server
[186星][3y] [Go] petercunha/goat a trojan created in Go, using Twitter as a the C&C server

[1117星][1y] [Py] byt3bl33d3r/gcat A PoC backdoor that uses Gmail as a C&C server
[353星][3y] [Py] maldevel/gdog Python 编写的后门，使用 Gmail 做 C&C
[22星][1y] [Py] pure-l0g1c/keylogger A simple keylogger that uses Gmail as a C&C

[179星][3y] [Py] maldevel/canisrufus Python 编写的后门，使用 Github 做 C&C

[134星][1y] [Py] 0x09al/dropboxc2c DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

[46星][1y] [Go] xpn/blockchainc2 A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2
[35星][3m] [Py] geek-repo/c2-blockchain This is a concept poc of command and control server implemented over blockchain

[513星][1y] [Go] mthbernardes/gtrs 使用Google翻译器作为代理将任意命令发送到受感染的计算机
[102星][4m] [Py] nccgroup/gitpwnd 网络渗透测试工具，可使攻击者向被攻击机器发送命令，并使用 git repo 作为 C&C 传输层接收结果
[97星][2y] [Py] arno0x/webdavc2 A WebDAV PROPFIND C2 tool
[93星][2y] [PS] bkup/slackshell PowerShell to Slack C2
[84星][2y] [Go] 0x09al/browser-c2 Post Exploitation agent which uses a browser to do C2 operations.
[69星][13d] [Py] itskindred/redviper redViper is a proof of concept Command & Control framework that utilizes Reddit for communications.
[66星][2y] [Py] lukebaggett/google_socks A proof of concept demonstrating the use of Google Drive for command and control.
[29星][2y] [Py] ajinabraham/xenotix-xbot Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it\'s C&C
[26星][3y] [Py] dsnezhkov/octohook Git Web Hook Tunnel for C2
[23星][10d] [PS] netspi/sqlc2 SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
[22星][2y] [Py] woj-ciech/social-media-c2 Script is a proof of concept how to control your machine by using social media sites.
[16星][10d] [Py] securemode/trelloc2 Simple C2 over the Trello API
[14星][1y] [Py] j3ssie/c2s Command and Control server on Slack
[8星][2y] [Py] maldevel/dicerosbicornis A fully featured Windows backdoor that uses email as a C&C server
[7星][3y] [Py] killswitch-gui/flask_appengine_redirector Google App Engine Flask C2 redirector

通信协议

[318星][1m] [Py] baderj/domain_generation_algorithms 域名生成算法
[220星][17d] [Scala] sotera/spark-distributed-louvain-modularity Spark / graphX implementation of the distributed louvain modularity algorithm
[209星][3y] [Py] endgameinc/dga_predict Predicting Domain Generation Algorithms using LSTMs
[132星][2m] [Py] andrewaeva/dga The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.
[117星][6m] [Py] 360netlab/dga Suspicious DGA from PDNS and Sandbox.
[49星][2y] [java] toufikairane/andromalware Android Malware for educational purpose
[40星][4y] [Py] pchaigno/dga-collection A collection of known Domain Generation Algorithms
[31星][4y] [Py] endgameinc/sans_thir16 SANS Hunting on the Cheap
[31星][3y] [Py] staaldraad/fastfluxanalysis Scripts to detect Fast-Flux and DGA using DNS query responses
[28星][2y] [Py] philarkwright/dga-detection DGA Domain Detection using Bigram Frequency Analysis
[13星][3y] [Py] cisco-talos/goznym
[6星][1y] [Py] matthoffman/degas DGA-generated domain detection using deep learning models
[4星][3m] [PHP] navytitanium/eitest-tools-scripts-iocs
[1星][2m] [Py] bkcs-hust/lstm-mi A LSTM based framework for handling multiclass imbalance in DGA botnet detection

[1855星][8m] [C++] iagox86/dnscat2 在 DNS 协议上创建加密的 C&C channel
[832星][6d] [Go] bishopfox/sliver 一个通用的跨平台植入程序框架，该框架C3支持Mutual-TLS，HTTP（S）和DNS
[386星][4y] [Py] ahhh/reverse_dns_shell 使用DNS作为c2通道的python反向shell
[277星][1y] [Py] trycatchhcf/packetwhisper Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
[276星][4m] [Go] sensepost/godoh A DNS-over-HTTPS Command & Control Proof of Concept
[225星][2y] [PS] lukebaggett/dnscat2-powershell A Powershell client for dnscat2, an encrypted DNS command and control tool.
[176星][2y] [C++] 0x09al/dns-persist DNS-Persist is a post-exploitation agent which uses DNS for command and control.
[41星][2m] [Erlang] homas/ioc2rpz ioc2rpz is a place where threat intelligence meets DNS.
[38星][2m] [JS] inquest/threatkb Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

[245星][2y] [Py] arno0x/wsc2 A WebSocket C2 Tool
[131星][9d] [C++] xorrior/raven CobaltStrike External C2 for Websockets

C&C

[462星][2y] rsmudge/malleable-c2-profiles Malleable C2 is a domain specific language to redefine indicators in Beacon\'s communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
[217星][2y] [Py] bluscreenofjeff/malleable-c2-randomizer A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
[195星][1y] [PS] qax-a-team/cobaltstrike-toolset Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
[188星][2y] [C#] ryhanson/externalc2 A library for integrating communication channels with the Cobalt Strike External C2 server
[165星][6m] threatexpress/malleable-c2 Cobalt Strike Malleable C2 Design and Reference Guide
[160星][11d] [Py] threatexpress/cs2modrewrite Convert Cobalt Strike profiles to modrewrite scripts
[146星][2y] [Py] und3rf10w/external_c2_framework Python api for usage with cobalt strike\'s External C2 specification
[105星][5m] xx0hcd/malleable-c2-profiles Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike
[67星][2y] [C] outflanknl/external_c2 POC for Cobalt Strike external C2
[56星][24d] 1135/1135-cobaltstrike-toolkit about CobaltStrike
[55星][1y] [Py] truneski/external_c2_framework Python api for usage with cobalt strike\'s External C2 specification
[41星][3y] bluscreenofjeff/malleablec2profiles Malleable C2 profiles for Cobalt Strike
[41星][2y] [Go] empty-nest/emptynest 基于插件的 C2 服务器框架。其目标不是取代某些强大的工具（例如 Empire、Metasploit、CobaltStrike），而是创建一个支持框架，以便为自定义 agents 快速创建小型、专用的 handlers
[12星][5m] [TS] hattmo/c2profilejs Web UI for creating C2 profiles for Cobalt Strike

[1135星][13d] [Boo] byt3bl33d3r/silenttrinity An asynchronous, collaborative post-exploitation agent powered by Python and .NET\'s DLR
[614星][12d] [Py] trustedsec/trevorc2 通过正常的可浏览的网站隐藏 C&C 指令的客户端/服务器模型，因为时间间隔不同，检测变得更加困难，并且获取主机数据时不会使用 POST 请求
[575星][3m] [PS] nettitude/poshc2_old Powershell C2 Server and Implants
[478星][5m] [C++] fsecurelabs/c3 一个用于快速定制C2通道原型的框架，同时仍提供与现有攻击性工具包的集成。
[442星][3y] [CSS] graniet/chromebackdoor 一个渗透测试工具PoC，使用MITB技术在启动后生成Windows可执行文件“ .exe”，并在大多数流行的浏览器上运行恶意扩展或脚本，并通过C&C发送所有DOM数据。
[336星][12d] [PS] nettitude/poshc2 Python Server for PoshC2
[325星][1y] [C#] spiderlabs/dohc2 DoHC2 allows the ExternalC2 library from Ryan Hanson (
[273星][4m] [Py] felixweyne/imaginaryc2 辅助对恶意软件进行行为（网络）分析，python
[205星][3y] [Py] countercept/doublepulsar-c2-traffic-decryptor 处理PCAP文件，解密发送到DOUBLEPULSAR implant的C2流量
[186星][2y] [Py] woj-ciech/daily-dose-of-malware Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.
[155星][7d] [Py] chrispetrou/hrshell HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
[136星][2y] [Py] pjlantz/hale Botnet command & control monitor
[132星][10m] [C] treehacks/botnet-hackpack Build a basic Command & Control botnet in C
[130星][6d] [Py] mhaskar/octopus Open source pre-operation C2 server based on python and powershell
[125星][7d] [JS] p3nt4/nuages A modular C2 framework
[99星][6d] [Py] ziconius/fudgec2 FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
[83星][5y] [Py] maldroid/maldrolyzer Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
[79星][9m] [C++] watersalesman/aura-botnet A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell.
[70星][14d] [Py] angus-y/pyiris-backdoor a modular, stealthy and flexible remote-access-toolkit written completely in python used to command and control other systems.
[68星][1m] [C#] maraudershell/marauder A .NET agent for the Faction C2 Framework
[67星][5m] [HTML] project-prismatica/prismatica Responsive Command and Control System
[58星][1y] [C#] mdsecactivebreach/browser-externalc2 External C2 Using IE COM Objects
[56星][2y] [Go] averagesecurityguy/c2 A simple, extensible C&C beaconing system.
[48星][3m] [Shell] professionallyevil/c4 Cyberdelia, a Collection of Command and Control frameworks
[44星][30d] [JS] shadow-workers/shadow-workers C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
[41星][2y] [Py] v1v1/sleight Empire HTTP(S) C2 redirector setup script
[39星][1y] [PS] outflanknl/doh_c2_trigger Code for blogpost:
[38星][12d] [C#] sf197/telegra_csharp_c2 Command and Control for C# Writing
[37星][11m] [Go] prsecurity/golang_c2 Boilerplate C2 written in Go for red teams
[31星][16d] [Py] qsecure-labs/overlord Overlord - Red Teaming Infrastructure Automation
[30星][6y] [PS] enigma0x3/powershell-c2
[24星][1y] prsecurity/neutrino Neutrino C2 Source Code
[23星][25d] [Go] audibleblink/bothan Is this IP a C2 server?
[19星][1y] tevora-threat/rt_redirectors Ansible role to configure redirectors for red team C2
[18星][5y] [PS] et0x/c2 Methods of C2
[18星][1m] [Py] marcorosa/cnc-botnet-in-python C&C Botnet written in Python with fabric
[17星][1y] [C] kiwidoggie/oni-framework Embedded systems C2 software written in C/C#
[17星][3y] [Go] pandipanda69/my-little-honeypot This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control.
[17星][4m] stvemillertime/absolutely-positively-not-hacking-back-with-pcap Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control Nodes
[16星][4y] [Py] hasherezade/bunitu_tests Scripts for communication with Bunitu Trojan C&Cs
[16星][6m] [C] blacchat/xzf EXIF-based command and control PoC
[16星][10m] [Py] daniel-infosec/wikipedia-c2 POC for utilizing wikipedia API for Command and Control
[14星][5y] [Py] nocow4bob/pix-c2 Ping Exfiltration Command and Control (PiX-C2)
[14星][3y] [Py] secarmalabs/indushell PoC C&C for the Industroyer malware
[14星][5m] [C#] immersive-command-system/immersivedroneinterface aerial vehicle command and control platform, designed for immersive interfaces (such as the Oculus Rift).
[11星][4m] [Py] jacobsoo/amtracker Android Malware Tracker
[10星][12m] [Dockerfile] d3vzer0/cnc-relay Docker projects to retain beacon source IPs using C2 relaying infra
[10星][9m] [Py] m8r0wn/transportc2 PoC Command and Control Server. Interact with clients through a private web interface, add new users for team sharing and more.
[10星][3y] [Py] r3mrum/loki-parse A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc...
[9星][4m] [Py] degenerat3/meteor Cross-platform C2 with modules for TCP, web, and more soon to come
[8星][2m] [Py] jacobsoo/malconfig This is part of a module for the framework that i\'m constantly developing. Currently only information of the C2 are disclosed here.
[8星][3y] [Py] killswitch-gui/flask_heroku_redirector flask heroku C2 redirector template
[8星][5m] [Py] r00k5a58/pyc2 simple c2 written in python to demonstrate security concepts
[8星][11m] tothi/kali-rpi-luks-crypt Full disk encryption for Kali on Raspberry using LUKS
[8星][25d] [Go] xorrior/apfell-chrome-extension-c2server Apfell C2 Server for the Google Chrome Extension Payload
[7星][3y] [PS] 0sm0s1z/invoke-selfsignedwebrequest This repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and press on with the hack!
[6星][2y] [C#] jaydcarlson/c2-printf 通过 Silicon Labs C2 调试器连接打印跟踪消息
[6星][5m] [Py] m507/m-botnet A C2 project that controls a self-propagating MS17-010 worm.
[5星][3y] [Py] killswitch-gui/flask_pythonanywhere_redirector flask pythonanywhere C2 redirector template
[4星][3y] [Py] mellow-hype/c2finder Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
[4星][2y] [PHP] nao-sec/ramnit_traffic_parser Parsing Ramnit\'s traffic
[3星][23d] [C++] lima-x-coding/win32.-d0t-nix.c2 A C/C++ recreation off the original Win32.VB.Illerka.C Virus by Michael [APFX]
[0星][2y] [Py] bizdak/silverboxcc Reverse engineered android malware, and this is a C&C server for it
[0星][2y] boaxboax/ctf-quaorar

远控

[1615星][9d] [Py] zerosum0x0/koadic 类似于Meterpreter、Powershell Empire 的post-exploitation rootkit，区别在于其大多数操作都是由 Windows 脚本主机 JScript/VBScript 执行
[1473星][3y] [Py] nathanlopez/stitch 一个跨平台的远控框架，可为Windows，Mac OSX和Linux构建自定义的Payload
[789星][4m] [Py] kevthehermit/ratdecoders Python Decoders for Common Remote Access Trojans
[764星][7d] [C] rdesktop/rdesktop rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capably of natively speaking Remote Desktop Protocol (RDP) in order to present the user\'s Windows desktop. rdesktop is known to work with Windows server version ranging from NT 4 terminal server to Windows 2012 R2.
[706星][1y] [PS] arvanaghi/sessiongopher 使用WMI为远程访问工具（如WinSCP，PuTTY，SuperPuTTY，FileZilla和Microsoft远程桌面）提取保存的会话信息。PowerShell编写
[538星][10d] [JS] mr-un1k0d3r/thundershell 通过HTTP请求进行通信的C＃RAT
[392星][5m] [C++] werkamsus/lilith 基于C ++开发的基于控制台的超轻量RAT
[297星][2y] [Py] 0xislamtaha/python-rootkit Python远控，用于获取Meterpreter会话
[238星][6d] [C#] b4rtik/redpeanut RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
[222星][9d] [C++] xdnice/pcshare 远程控制软件，可以监视目标机器屏幕、注册表、文件系统等。
[214星][2y] [C#] them4hd1/vayne-rat 用C＃编码的免费和开源远程管理工具。
[205星][2y] [C++] ahxr/ghost a light RAT that gives the server/attacker full remote access to the user\'s command-line interprete
[201星][10d] [Py] pure-l0g1c/loki 远程访问工具，使用 RSA-2048 + AES-256 保护通信安全
[195星][3m] [PHP] 0blio/caesar 基于HTTP的RAT，从浏览器远程控制设备
[175星][4y] [C#] alphadelta/secure-desktop Anti-keylogger/anti-rat application for Windows
[172星][3y] [C++] hussein-aitlahcen/blackhole C# RAT (Remote Administration Tool)
[157星][10d] [Visual Basic] mwsrc/plasmarat Remote Access Trojan(RAT), Miner, DDoS
[140星][1m] [Py] anhkgg/pyrat 基于python XmlRPC完成的远控开源项目，包括客户端和服务端（也叫控制端，后统称服务端）
[136星][25d] [C++] earthquake/universaldvc Universal Dynamic Virtual Channel connector for Remote Desktop Services
[129星][2y] [Py] dviros/rat-via-telegram 使用Telegram控制已经攻克的Windows主机
[115星][4y] [C#] leurak/trollrat 远程管理工具（RAT），该工具采用与其他RAT不同的方法，不做数据窃取等，只是为了trolling
[98星][4m] [JS] securityrat/securityrat OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
[95星][7y] [C#] ilikenwf/darkagent DarkAgent Remote Administration Tool RAT by DragonHunter
[95星][2y] [Pascal] senjaxus/allakore_remote Delphi Seattle编写的远控
[80星][4y] [C++] rwhitcroft/dnschan 使用DNS通信的远程访问木马
[77星][4y] [Py] ahhh/reverse_https_bot A python based https remote access trojan for penetration testing
[66星][11d] [Visual Basic] thesph1nx/rt-101 VB.net Remote Administrator Tool (RAT)
[65星][7m] sh1n0g1/shinobot RAT / Botnet Simulator for pentest / education
[61星][28d] [Visual Basic] thesph1nx/slickermaster-rev4 NSA Hacking Tool Recreation UnitedRake
[61星][2m] [C#] nyan-x-cat/mass-rat Basic Multiplatform Remote Administration Tool - Xamarin
[58星][3y] [PS] killswitch-gui/persistence-survivability Powershell Persistence Locator
[57星][3y] [Py] m4sc3r4n0/spyrat Python Remote Access Trojan
[55星][4y] [Py] ahhh/ntp_trojan Reverse NTP remote access trojan in python, for penetration testers
[53星][8d] [Java] blackhacker511/blackrat Java编写的远控
[52星][12d] [Py] technowlogy-pushpender/technowhorse TechNowHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
[50星][11d] [C#] brunull/pace A Remote Access Tool for Windows.
[46星][1m] [Pascal] 0x48piraj/malwarex Collection of killers
[46星][1m] [PHP] davidtavarez/pinky pinky - The PHP mini RAT (Remote Administration Tool)
[46星][20d] [Shell] infosecn1nja/ycsm This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
[46星][18d] [Java] m301/rdroid [Android RAT] Remotely manage your android phone using PHP Interface
[46星][2y] pentestpartners/ptp-rat Exfiltrate data over screen interfaces
[44星][2y] [Shell] taherio/redi Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
[41星][3y] [C] killswitch-gui/hotload-driver C++
[40星][5y] [C++] lingerhk/0net 一个简单的Windows远程控制后门
[40星][3y] [Visual Basic .NET] mwsrc/betterrat Better Remote Access Trojan
[39星][1m] [Shell] samyk/easel-driver Easel driver for Linux (and Mac/Windows) + remote access to CNC controller
[37星][11d] [PS] 5alt/zerorat ZeroRAT是一款windows上的一句话远控
[36星][5m] [C#] blackvikingpro/aresskit Next Generation Remote Administration Tool (RAT)
[35星][3y] ritiek/rat-via-telegram Removed according to regulations
[29星][1m] [Py] the404hacking/windows-python-rat A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
[26星][2y] [Py] thegeekht/loki.rat Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.
[25星][9m] [D] alexa-d/alexa-openwebif alexa skill to control your openwebif device
[24星][2y] [Py] rootm0s/casper

开源远控/C&C工具

所有收集类项目

RAT

目录

开源工具

pupy

工具

文章

Covenant

工具

文章

Slackor

工具

文章

QuasarRAT

工具

文章

EvilOSX

工具

文章

Merlin

工具

文章

商业软件

Team Viewer

工具

文章

恶意软件(部分)

Gh0st

工具

文章

NanoCore

工具

文章

NjRat

工具

文章

Revenge RAT

工具

文章

PlugX

工具

文章

RemcosRAT

L0rdixRAT

LodaRAT

GulfRAT

NetWireRAT

JhoneRAT

Dacls

BlackRemote

Orcus

NukeSped

DarkComet

WarZone RAT

BlackShades

DenesRAT

WSH RAT

Qrypter RAT

Adwind

CannibalRAT

jRAT

jsRAT

CrossRat

ArmaRat

RokRAT

CatKARAT

TheFatRat

OmniRAT

LuminosityLink

其他

利用公开服务

Telegram

工具

文章

Twitter

工具

文章

GMail

工具