{"id":24854512,"url":"https://github.com/cbrnrd/maliketh","last_synced_at":"2025-07-31T08:04:04.054Z","repository":{"id":161402784,"uuid":"600492918","full_name":"cbrnrd/maliketh","owner":"cbrnrd","description":"🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python","archived":false,"fork":false,"pushed_at":"2024-03-03T20:24:44.000Z","size":11111,"stargazers_count":44,"open_issues_count":2,"forks_count":5,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-04-07T16:02:12.517Z","etag":null,"topics":["c2","cybersecurity","framework","malware","penetration-testing","pentest-tool","redteam-tools","redteaming","windows"],"latest_commit_sha":null,"homepage":"https://malikethframework.com","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cbrnrd.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-02-11T17:02:37.000Z","updated_at":"2025-03-14T23:46:50.000Z","dependencies_parsed_at":"2025-01-31T15:38:39.753Z","dependency_job_id":"f81fe784-1eb7-4f1e-bcc4-0dca944de70c","html_url":"https://github.com/cbrnrd/maliketh","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/cbrnrd/maliketh","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cbrnrd%2Fmaliketh","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cbrnrd%2Fmaliketh/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cbrnrd%2Fmaliketh/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cbrnrd%2Fmaliketh/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cbrnrd","download_url":"https://codeload.github.com/cbrnrd/maliketh/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cbrnrd%2Fmaliketh/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":268009703,"owners_count":24180458,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-31T02:00:08.723Z","response_time":66,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["c2","cybersecurity","framework","malware","penetration-testing","pentest-tool","redteam-tools","redteaming","windows"],"created_at":"2025-01-31T15:38:29.164Z","updated_at":"2025-07-31T08:04:04.019Z","avatar_url":"https://github.com/cbrnrd.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!-- Centered logo --\u003e\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"./data/maliketh_logo.png\" alt=\"Maliketh logo\" width=\"900\" height=\"300\"/\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  A multi-user, customizable C2 framework.\n  \u003cbr\u003e\n  \u003ca href=\"https://malikethframework.com\"\u003e\u003cstrong\u003eVisit the website »\u003c/strong\u003e\u003c/a\u003e\n  \u003cbr\u003e\n  \u003cbr\u003e\n  \u003cimg alt=\"GitHub License\" src=\"https://img.shields.io/github/license/cbrnrd/maliketh?style=flat-square\u0026color=ff5733\"\u003e\n  \u003cimg alt=\"Latest Release\" src=\"https://img.shields.io/github/v/release/cbrnrd/maliketh?logo=github\u0026style=flat-square\u0026color=ff5733\u0026link=https%3A%2F%2Fgithub.com%2Fcbrnrd%2Fmaliketh%2Freleases\"\u003e\n  \u003cimg alt=\"GitHub Workflow Status (with event)\" src=\"https://img.shields.io/github/actions/workflow/status/cbrnrd/maliketh/docker-image.yml?style=flat-square\"\u003e\n  \u003cimg alt=\"GitHub Release Date - Published_At\" src=\"https://img.shields.io/github/release-date/cbrnrd/maliketh?style=flat-square\u0026color=ff5733\u0026link=https%3A%2F%2Fgithub.com%2Fcbrnrd%2Fmaliketh%2Freleases\"\u003e\n  \u003cimg alt=\"GitHub contributors\" src=\"https://img.shields.io/github/contributors/cbrnrd/maliketh?style=flat-square\u0026color=ff5733\"\u003e\n\u003c/p\u003e\n\n---\n\nThe goal of Maliketh is to provide a flexible, easy to use C2 framework that can be customized to fit the needs of the operator. The poster used in the initial presentation is located [here](./data/Maliketh%20C2%20Poster.png).\n\n## Implant features\n\nThe initial implant was written in C++ and targeted for Windows. A Golang implant has also been implemented and supports all major platforms, however it is not feature complete.\n\nThe main feature of the implant is its ability to change its behavior based on the configuration file it receives from the server. This allows the operator to customize the implant to fit their needs. The implant also has the following features (see [here](./design/opcodes.md) for more info):\n\n* File upload/download\n* Command execution\n* Shellcode injection\n* Update configuration\n* Send system information\n* Self-destruct\n* Sleep\n* Basic Anti-debugging\n* *Very* Basic Anti-VM\n* Sleep skipping detection\n\n## Future work\n\n- [x] Implement Golang client ([0639f87](https://github.com/cbrnrd/maliketh/commit/0639f8797838469a068d91f095e3307d2d73ecc4))\n* [x] Per-operator builder in-server ([917d514](https://github.com/cbrnrd/maliketh/commit/917d514fc6075cc15d0e45b4a1a546e6217e4139))\n* [ ] Stealer/basic looter\n* [x] AV Disable ([0aeec4c](https://github.com/cbrnrd/maliketh/commit/0aeec4c4be8f1efaeaf15ee3d289507036c691df))\n* [ ] Change design of config to be protocol agnostic.\n  * ie Define an HTTPS layer/adapter and separate out the code better.\n* [ ] Keylogger\n* [x] Allow implant aliasing/renaming\n  * This shouldn't change the actual ID, just create a mapping table\n* [ ] More fine grained backend roles and actions (blocking users, % bot allocation)\n* [x] Add ability to send command to every bot\n* [ ] Floods\n* [ ] Route RabbitMQ traffic through Admin listener instead of directly connecting\n* [ ] Improved anti-vm (check BIOS information)\n  * [x] Not bad in golang implant\n* [x] More stable file uploads/downloads ([91a40f2](https://github.com/cbrnrd/maliketh/commit/91a40f2ba1cded5a025004a6143578fa84baec66))\n* [x] Basic OS functions built in ([91a40f2](https://github.com/cbrnrd/maliketh/commit/91a40f2ba1cded5a025004a6143578fa84baec66))\n* [x] Situational Awareness ([91a40f2](https://github.com/cbrnrd/maliketh/commit/91a40f2ba1cded5a025004a6143578fa84baec66))\n\n## Star History\n\n\u003ca href=\"https://star-history.com/#cbrnrd/maliketh\u0026Date\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"https://api.star-history.com/svg?repos=cbrnrd/maliketh\u0026type=Date\u0026theme=dark\" /\u003e\n    \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"https://api.star-history.com/svg?repos=cbrnrd/maliketh\u0026type=Date\" /\u003e\n    \u003cimg alt=\"Star History Chart\" src=\"https://api.star-history.com/svg?repos=cbrnrd/maliketh\u0026type=Date\" /\u003e\n  \u003c/picture\u003e\n\u003c/a\u003e\n\n\u003cp align=\"center\"\u003e\u003ca href=\"https://github.com/cbrnrd/maliketh#\"\u003e\u003cimg src=\"http://randojs.com/images/backToTopButtonTransparentBackground.png\" alt=\"Back to top\" height=\"29\"/\u003e\u003c/a\u003e\u003c/p\u003e","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcbrnrd%2Fmaliketh","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcbrnrd%2Fmaliketh","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcbrnrd%2Fmaliketh/lists"}