DNS tunneling

WMImplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based. - RedSiege/WMImplant

wsc2

A WebSocket C2 Tool. Contribute to Arno0x/WSC2 development by creating an account on GitHub.

Twittor

A fully featured backdoor that uses Twitter as a C&C server - GitHub - PaulSec/twittor: A fully featured backdoor that uses Twitter as a C&C server

TrevorC2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution. - trustedsec/trevorc2

DNSCat2

Contribute to iagox86/dnscat2 development by creating an account on GitHub.

Proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP. - haad/proxychains

socat

Pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C - n1nj4sec/pupy

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. - BC-SECURITY/Empire

Covenant

Covenant is a collaborative .NET C2 framework for red teamers. - cobbr/Covenant

Havoc

The Havoc Framework. Contribute to HavocFramework/Havoc development by creating an account on GitHub.

Sliver C2