outflanknl/C2-Tool-Collection

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1415 stars · 215 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of C-based offensive security tools that integrate with Cobalt Strike and other C2 frameworks via Beacon Object Files (BOF) and reflective DLL loading. It includes tools for Active Directory enumeration, privilege escalation exploits, credential dumping, and host reconnaissance used in red team operations.

Use cases

• run red team post-exploitation tools through Cobalt Strike
• enumerate Active Directory domain info from a beacon
• exploit CVE-2022-26923 ADCS privilege escalation
• kerberoast service accounts and dump LAPS passwords
• detect installed EDR/AV products on a target host
• add rogue machine accounts in Active Directory
• load offensive tools via BOF or reflective DLL

When to choose

• you run Cobalt Strike or a compatible C2 framework and need BOF tooling
• you need AD-focused post-exploitation and recon tools written in C
• you want community-maintained red team tooling from a reputable security firm

When to avoid

• you need a standalone tool that works without a C2 framework
• you require a maintained license or official support
• you need defensive-only tooling rather than offensive capabilities

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing developer-tools windows cli red-team cobalt-strike bof beacon-object-files reflective-dll ad-exploitation c2-frameworks offensive-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="outflanknl/C2-Tool-Collection")