INotGreen/XiebroC2

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1391 stars · 207 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

XiebroC2 is an open-source command-and-control (C2) framework for penetration testing, written in Go with a .NET teamserver. It supports Lua plugin extensions, domain fronting/CDN callbacks, in-memory PE and .NET assembly execution, file/process management, screenshots, reverse proxy, and customizable profiles.

Use cases

• run a c2 server for authorized penetration tests
• extend c2 commands with lua plugins
• load pe files or .net assemblies in memory
• manage files and processes on compromised hosts
• take screenshots and monitor network traffic of sessions
• set up domain fronting or cdn-based callbacks
• generate reflective dll injection shellcode

When to choose

• you need a free, cross-platform c2 for red team exercises or pentest training
• you want lua-based extensibility similar to cobalt strike aggressor scripts
• you need in-memory execution to evade disk-based detection during authorized tests

When to avoid

• you need a fully open-source codebase - teamserver and controller are closed-source
• you need 32-bit payload support without compiling yourself
• you require a commercially supported or audited tool for production engagements
• any use outside authorized security testing

Facets

application · maturity active

security reverse-engineering networking plugin-system developer-tools penetration-testing security cross-platform windows go cross-platform c2-framework post-exploitation red-team lua-plugins implant teamserver domain-fronting reverse-proxy shellcode-loader command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="INotGreen/XiebroC2")