c2detect

active

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.