offensive-c2-frameworks
SnailSploit/Claude-Red/Skills/forensics/offensive-c2-frameworks
部署和配置命令与控制框架
Command and Control framework deployment, configuration, and operational tradecraft for red team engagements. Covers Cobalt Strike (malleable C2 profiles, Beacon types HTTP/HTTPS/DNS/SMB, Beacon Object Files for in-memory execution, sleep and jitter tuning, named pipe pivoting), Sliver (implant generation across mTLS/WireGuard/DNS transport, operator multiplayer mode, armory extensions), Mythic (agent ecosystem with Apollo/Poseidon/Medusa, C2 profile configuration, translation containers), Havoc (Demon agent with sleep obfuscation via Ekko/Zilean, indirect syscalls, dotnet inline execution), Metasploit (msfvenom payload generation, multi/handler staging, Meterpreter post-exploitation modules), redirector architecture using Apache mod_rewrite and Nginx, domain fronting through CDN providers, DNS-based C2 for restrictive network egress, and TLS certificate management for infrastructure OPSEC. Tools: Cobalt Strike, Sliver, Mythic, Havoc, Metasploit Framework. Aligns to MITRE ATT&CK T1071 (Application Layer Protocol), T1573 (Encrypted Channel), T1090 (Proxy/Connection Proxy).
把下面的话发给 Claude Code、Codex 或 Cursor。智能体会先检查内容,经你确认再安装。
请帮我安装这个 Agent Skill:https://github.com/SnailSploit/Claude-Red/tree/main/Skills/forensics/offensive-c2-frameworks 1. 先读取该目录下的 SKILL.md 和其他文件,检查是否有可疑内容(执行未知脚本、读取密钥、向外发送数据等),用中文告诉我它会做什么、需要哪些权限; 2. 等我确认后,再把整个目录安装到 ~/.claude/skills/offensive-c2-frameworks/(如果你不是 Claude Code,安装到你自己约定的 skills 目录); 3. 安装后告诉我怎么触发它。
安装到个人 Skill 目录(对所有项目生效)。只想在当前项目用,改为 .claude/skills/。
git clone --depth 1 --filter=blob:none --sparse https://github.com/SnailSploit/Claude-Red.git /tmp/offensive-c2-frameworks-src cd /tmp/offensive-c2-frameworks-src && git sparse-checkout set "Skills/forensics/offensive-c2-frameworks" mkdir -p ~/.claude/skills && cp -r "Skills/forensics/offensive-c2-frameworks" ~/.claude/skills/offensive-c2-frameworks
Skill 可以让智能体执行脚本。安装第三方 Skill 前务必看一遍内容,详见「安全」一课。
SKILL.md
在 GitHub 查看正在从 GitHub 读取……