JM00NJ/ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent

A fileless C2 framework written in pure x64 Linux Assembly with zero libc dependencies. Features dynamic protocol pivoting between raw ICMP sockets and DNS (UDP/53) via in-memory VTable manipulation. 100% direct syscalls, no disk writes, and strict mathematical packet authentication.

语言：Assembly · GitHub 星标：102 · Fork：22

话题：assembly · c2-framework · compression-algorithm · dns-tunneling · edr-evasion · evasion · fileless-malware · icmp-protocol

在 GitHub 上查看原仓库