DeimosC2/DeimosC2

Health v2 · maintenance only

Adoption not part of the score

1160 stars · 166 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DeimosC2 is a Golang-based command and control (C2) framework for post-exploitation, supporting TCP, HTTPS, DoH, and QUIC agent communications with a Vue.js web frontend. It is now deprecated, unmaintained, and has a known XSS vulnerability (CVE-2025-26244).

Use cases

• run a command and control server for red team operations
• control compromised machines over HTTPS, DoH, or QUIC
• manage post-exploitation agents with a web UI
• generate payloads dynamically for multiple protocols
• study how C2 frameworks are built in Go

When to choose

• you need a Go-based C2 with DoH or QUIC listeners for research
• you want a self-contained C2 with multi-user web interface and 2FA
• you are studying C2 architecture or historical red team tooling

When to avoid

• you need a maintained tool - the project is deprecated and unmaintained
• security matters - it has a known unpatched XSS vulnerability (CVE-2025-26244)
• you need production red team infrastructure - consider actively maintained alternatives like Sliver or Mythic

Facets

framework · maturity abandoned

security websocket http-server security penetration-testing developer-tools windows cross-platform go c2 red-team post-exploitation command-and-control doh quic deprecated known-vulnerability linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="DeimosC2/DeimosC2")