nettitude/PoshC2

Health v2 · maintenance only

Adoption not part of the score

2132 stars · 354 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PoshC2 is a proxy-aware Command and Control (C2) framework written in Python3 that aids penetration testers with red teaming, post-exploitation, and lateral movement. It provides PowerShell, C#, and Python implants with encrypted communications, modular extensibility, and cross-platform support via Docker.

Use cases

• run a command and control server for red team engagements
• generate payloads for post-exploitation on Windows and Linux
• perform lateral movement across a compromised network
• tunnel traffic through a proxy-aware C2 channel
• daisy-chain implants to reach networks without internet access
• set up a SOCKS proxy through compromised hosts
• test detection of AMSI-bypassing shellcode and ETW patching

When to choose

• you need an open-source, self-hosted C2 framework for authorized red team operations
• you want proxy-aware, encrypted C2 communications over HTTP(S) or SMB named pipes
• you need cross-platform implants (Windows, Linux, macOS) with PowerShell, C#, and Python payloads
• you want a modular framework you can extend with custom C#, PowerShell, or Python modules
• you need team collaboration with a client/server C2 setup and extensive logging

When to avoid

• you need a C2 framework for unauthorized access or malicious purposes
• you want a simple vulnerability scanner or passive reconnaissance tool rather than an active post-exploitation framework
• you require a managed commercial C2 platform with vendor support
• you need a lightweight agent without the overhead of a full C2 server infrastructure

Facets

framework · maturity active

security networking proxy developer-tools security penetration-testing networking python cross-platform self-hosted c2 red-team post-exploitation lateral-movement powershell implants command-and-control penetration-testing automation linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nettitude/PoshC2")