Ross ROSS = Recommend OSS · open-source software intelligence for agents

DragoQCC/CrucibleC2

A C# Command & Control framework observed · 2026-08-28

github.com/DragoQCC/CrucibleC2 · C# · BSD-3-Clause (permissive) observed · 2026-08-28

Health v2 · maintenance only

22/100

  • Activity 0
  • Release rhythm 8
  • Longevity 97
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 1364
  • days_rel: n/a
  • days_push: 889
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1024 stars · 132 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

HardHat C2 (CrucibleC2) is a cross-platform, multi-user Command & Control framework written in C#/.NET for red team engagements and penetration testing. It consists of an ASP.NET teamserver, a Blazor client, and built-in C# implants with support for third-party implants.

Use cases

  • run a command and control framework for red team engagements
  • manage multi-operator C2 with role-based access control
  • generate payloads like exe, dll, shellcode, and powershell
  • create and edit C2 profiles during a penetration test
  • collaborate with a team on a shared teamserver
  • use third-party implants in other languages

When to choose

  • you need a free, open-source, cross-platform C2 framework in C#
  • you want multi-user collaboration with RBAC during engagements
  • you prefer an easy-to-use GUI client (Blazor) for C2 operations

When to avoid

  • you need a battle-tested, production-hardened C2 - it is in alpha with bugs and missing features
  • you require implants in languages other than C# without extra setup
  • you are not doing authorized security testing - this is a dual-use offensive tool

Facets

application · maturity experimental

security gui http-server middleware security penetration-testing developer-tools cross-platform dotnet self-hosted c2-framework red-team command-and-control implants teamserver blazor payload-generation rbac web-server

1 source

Member repositories

RepositoryRoleHealth v2
DragoQCC/CrucibleC2main22

For agents

markdown · JSON · MCP: product_card(name="DragoQCC/CrucibleC2")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem