Topics / #command-and-control

Command-and-control projects on GitHub

Command-and-control (C2) frameworks for penetration testing and red team operations

As of , the most-starred Command-and-control projects on GitHub are sliver (12.1K stars), Red-Teaming-Toolkit (10.8K stars) and CyberStrikeAI (7.9K stars). GitHub.Locker tracks 7 Command-and-control repositories with 38.5K stars combined. The fastest-growing on October 20 was Decepticon, with +27 stars in a day.

7Projects
38.5KStars in total
+62Stars in a day
Browse in the catalog →github.com/topics/command-and-control ↗

Hot right now

Most stars gained in a day · Oct 20

+27

Decepticon

BitterSecurity/Decepticon · ★ 6.4K

Decepticon is a professional autonomous Red Team agent that runs full attack chains — reconnaissance, exploitation, privilege escalation, lateral movement, and C2 — the way a real adversary would, instead of just scanning and printing a report.

+23

CyberStrikeAI

AIPentest/CyberStrikeAI · ★ 7.9K

CyberStrikeAI is an AI-native cybersecurity platform that turns natural-language intent into governed, auditable security operations, using agents, 100+ security tools, MCP integration, and attack-chain tracking for authorized penetration testing.

+7

sliver

BishopFox/sliver · ★ 12.1K

Sliver is an open source cross-platform adversary emulation and red team framework that organizations of any size can use to perform security testing.

+4

Red-Teaming-Toolkit

infosecn1nja/Red-Teaming-Toolkit · ★ 10.8K

It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

The all-time top

7 projects · by stars

  1. #1 · BishopFox/sliver

    sliver

    Sliver is an open source cross-platform adversary emulation and red team framework that organizations of any size can use to perform security testing.

    12.1K
  2. #2 · infosecn1nja/Red-Teaming-Toolkit

    Red-Teaming-Toolkit

    It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

    10.8K
  3. #3 · AIPentest/CyberStrikeAI

    CyberStrikeAI

    CyberStrikeAI is an AI-native cybersecurity platform that turns natural-language intent into governed, auditable security operations, using agents, 100+ security tools, MCP integration, and attack-chain tracking for authorized penetration testing.

    7.9K
  1. 4

    Decepticon

    6.4KBitterSecurity/Decepticon · Python

    Decepticon is a professional autonomous Red Team agent that runs full attack chains — reconnaissance, exploitation, privilege escalation, lateral movement, and C2 — the way a real adversary would, instead of just scanning and printing a report.

  2. 5

    BEAR-C2

    704S3N4T0R-0X0/BEAR-C2 · Python

    BEAR-C2 is an adversary simulation and emulation framework for red team operations, built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

  3. 6

    edrEvasionWorkshop

    397tyeurada/edrEvasionWorkshop

    Workshop materials from DEF CON 34 and BSidesLV 2026 on writing custom malware that evades EDR — from loaders to kernel-level techniques.

  4. 7

    redStackPRO

    164devZero-Security/redStackPRO · Python

    redStackPRO is a web canvas for designing red team attack infrastructure and defensive Active Directory cyber ranges; you compose a topology visually, and it exports a ready-to-run Terraform and Ansible working directory that you deploy yourself.

Often tagged together