trustedsec/trevorc2

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1344 stars · 281 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TrevorC2 is a client/server command-and-control framework that tunnels communications through a browsable, legitimate-looking website to evade detection. It hides commands in website content (e.g., before the </body> tag) and exfiltrates data without POST requests, using configurable timing intervals.

Use cases

• set up a covert c2 channel that blends into normal web traffic
• red team command and control over http
• test detection of c2 traffic masquerading as legitimate browsing
• exfiltrate data without post requests
• clone a website as a cover for c2 server
• run implant communications over get requests only

When to choose

• you need a lightweight, customizable c2 for authorized red team engagements
• you want c2 traffic that looks like normal HTTP GET browsing
• you need a portable client supporting Windows, macOS, and Linux

When to avoid

• you need a full-featured production c2 framework with encryption and heavy randomization
• you want actively developed tooling with recent updates
• you need a supported, licensed enterprise product

Facets

application · maturity maintenance

security http-client http-server cryptography security penetration-testing windows python cli command-and-control c2 red-team covert-channel traffic-masquerading offensive-security command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="trustedsec/trevorc2")