DeimosC2 is a Golang-based post-exploitation command and control framework designed for managing compromised machines across multiple platforms.
DeimosC2 is a Golang command and control framework for post-exploitation.
DeimosC2 is primarily used by penetration testers and red team operators to control and manage compromised hosts during post-exploitation phases. It enables secure, multi-protocol communication with agents on Windows, Linux, and macOS systems to execute commands, browse files, and gather intelligence.
DeimosC2 is deprecated and no longer maintained, with a known critical XSS vulnerability (CVE-2025-26244). It should only be used in authorized environments with explicit permission. Users are advised to consider alternative maintained C2 frameworks due to security risks.
Download the latest release from the GitHub releases page: https://github.com/DeimosC2/DeimosC2/releases
Refer to the project wiki for detailed setup and usage instructions: https://github.com/DeimosC2/DeimosC2/wiki