THIS IS F**KING DANGEROUS. i found 3 open source hacking tools used by ethical hackers and, in some cases, malicious actors. and they are all FREE to use SLIVER → a command-and-control framework used for security testing and abused by attackers. CALDERA → automates attack simulations to test how... well defenses hold up. ADAPTIXC2 → lets security teams simulate post exploitation activity and manage agents in controlled environments. three powerful tools. one important lesson: understanding how hacking works is key to building stronger defenses. BOOKMARK this before someone take it down REPO BELOWshow more

Here are all the links 👇 Follow @maxdeg0 for more tools like this

Don’t miss out on stuff like this Join up

caldera is really good !

Yes champ It is solid for testing how well defenses hold up.

knowing how they work makes it way easier to spot and stop them Bookmarked

Exactly, understanding the tools helps you defend against them.

free stuff been being great lately!

Yes champ Free tools have been delivering some serious value lately.

Spinning these up on a k3s cluster would be a fun weekend lab

That would be a solid homelab project bro

Free stuffs getting dangerous asf

Yea Brother Free and open-source tools are getting seriously powerful.

My alpha guy for hacking stuff max

Got you bro more security tools coming soon 🫡

gold repos, forking them

tools are just tools, the real exploit is always human error anyway

True, human error is often the weakest link.

this 3 open source repos are absolutely useful max

Glad you find them useful champ 🫡

Can they use this for scampage too?

These tools can be abused but they’re mainly for security testing. Scam pages are a different thing, usually built with phishing kits to steal login details.

This is truly dangerous man, damn

Powerful tools for sure, best used in controlled environments.

free tools closing the skill gap fast

Knowing these tools helps you stay safe

Its very good for self hurting and defense hardened! You buy a knife and either use it for cooking or for k...ing it depends on yourself.

@grok when did Sliver become an AI tool?

Those open source frameworks are legit for red team testing but they get grabbed by the wrong people fast, so knowing how they work is basically the whole point of locking things down better

thanks

This product could indeed prove useful

Solid list. Most of the learning comes from watching what your logging misses while a Sliver implant beacons out

🤣🤣humans

Lol. You just found a few mediocre C2s and you're alarming as if you found a website that sells firearms or drugs in the clearnet (which is not hard to find either on telegram). What makes tools like this "dangerous" or not is not the C2 itself but the skill you MUST have to create an implant that's not detectable by any solutions (AVs or EDRs). Which makes the operator dangerous or not, not the tool. It's like saying "i found sharp 3 dangerous knives, links below", except the skill needed to use knives is laughable - these are FRAMEWORKS, not even ready tools, means you implement them into your existing workflow where coding skills are required. Also knowing the latest TTPs. And your workflow has to has a step where you're testing the built implant against the AV/EDR you're targeting. Offline - otherwise it's gonna get sent to places like virustotal for everyone to see, analyze and add to stream of known threats in every antivirus software before you first deploy it. You will NOT find a single dangerous (working) thing in the open internet for free. More likely that you will become a victim of someone else's malware just in case you're someone important - regular people aren't worth burning working implants on. Nobody who doesn't know how to write malware or who doesn't know how exactly they work will ever cause harm to anyone using these tools because they'll get caught the second their implant touches the disk, and those who know how to write malware write their own C2s and implants. It's easier to write a fully undetectable (FUD) malware from scratch than to make one of these FUD, because in their original form as linked they're gonna be quarantined by even the worst antivirus products that exist. They're signatured to oblivion. You need years of knowledge and testing against state of the art antimalware systems to get that knowledge on how to make it work. If you have to advertise something at least make it good enough: C2s like Havoc and Nighthawk are easily superior to sliver and others (even cobalt strike or brute ratel). They also require either vouching or other forms of checking you out because they're not accessible to anyone, plus they cost about $10,000 per 3 named licenses per year, and you can't buy just one. If they were that easy to obtain they wouldn't be as good. That's why cobalt strike that is cracked like hell is useless if you don't know how to write your own implant - as a team server they're okay, though better alternatives exist such as havoc. Caldera is super old, Atomic is a way better tool for authorized assessments trying hundreds of mitre TTPs to then secure the gaps properly. Sorry to burst your bubble.

sliver's payload size is almost 37 mb and it's not worth it. go with havoc any day.

With stronger attacks will come stronger defense. Im certain of it.

free tools like SLIVER and CALDERA blur the line between ethics and exploitation

looks dope

understanding how an attack works is needed to build defense

You must be living in the 90s

Thanks for sharing, Max. Understanding the attacker's side is how Blue Teams actually get better.

Looks seggsy bro free stuffs on top

sliver is strong c2 i heard be carefull who use

the dual use angle is huge. knowing attackers' playbooks beats pretending they don't exist