mgeeky/RedWarden
Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation observed · 2026-10-22
Health v2 · maintenance only
10/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases archived
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-22. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 1985
- days_rel: n/a
- days_push: 1475
- n_releases_24m: 0
Adoption not part of the score
994 stars · 138 forks observed · 2026-10-22
What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.9
RedWarden is a Python HTTP/HTTPS reverse proxy designed as a Cobalt Strike C2 redirector that filters inbound traffic. It inspects requests against Malleable C2 profiles, IP blacklists, and geolocation rules to block incident responders, AVs, EDRs, and scanners from reaching the teamserver.
Use cases
- set up a resilient Cobalt Strike C2 redirector
- filter unwanted scanners and security vendor IPs from reaching the teamserver
- validate inbound HTTP requests against malleable C2 profile contracts
- replace Apache2 mod_rewrite redirector setups
- mitigate C2 replay attacks via request hash logging
- route requests across multiple teamservers and proxy hosts
When to choose
- you are running authorized red team operations needing hardened C2 redirectors
- you want a single lightweight tool instead of Apache2 + mod_rewrite chains
- you need malleable profile-aware packet inspection on your redirector
When to avoid
- you need a general-purpose production reverse proxy
- you are not using Cobalt Strike or malleable C2 profiles
- you lack authorization for offensive security operations - misuse is illegal
Facets
cli-tool · maturity active
proxy security http-server networking security penetration-testing networking developer-tools python cli cobalt-strike c2-redirector red-team malleable-c2 reverse-proxy evasion linux
1 source
- readme: https://github.com/mgeeky/RedWarden · fetched 2026-10-22 · f97d10c8b0b0
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| mgeeky/RedWarden | main | 10 |
For agents
markdown · JSON · MCP: product_card(name="mgeeky/RedWarden")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem