Skip to content
Get packs

Offensive C2 Frameworks

Guides an agent through configuring red-team command-and-control tools like Cobalt Strike, Sliver and Mythic

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

Once installed, the agent can answer detailed questions about setting up and tuning command-and-control (C2) frameworks used by authorized red teams to simulate attackers. It covers Cobalt Strike, Sliver, Mythic, Havoc and Metasploit, including malleable traffic profiles, beacon types, sleep and jitter settings, redirector infrastructure, domain fronting and DNS-based channels. The skill is framed around evading detection by EDR and network monitoring, so its guidance is offensive tradecraft rather than defensive hardening.

Great for

  • Professional red team operators preparing an authorized engagement
  • Security instructors building lab exercises on attacker infrastructure
  • Blue team members who want to understand how C2 traffic is designed to evade detection

Skip it if

  • Anyone without written authorization to test the target, since the guidance is designed to evade detection and could enable unauthorized intrusion
  • Beginners looking for a general introduction to security, as the content assumes deep operator knowledge
  • Defenders needing detection rules or remediation steps, which this skill does not provide

Try asking

  • “Help me design a malleable C2 profile that mimics Microsoft 365 traffic for our authorized red team engagement”
  • “Explain how to set up Apache mod_rewrite redirectors in front of a Sliver team server”
  • “Compare DNS beacons and HTTPS beacons for an environment with restrictive egress”
  • “Walk me through sleep and jitter settings to reduce beaconing detection in a Cobalt Strike lab”

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-c2-frameworks.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-c2-frameworks.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-c2-frameworks.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • State your engagement scope and authorization up front so the agent's answers stay tied to a lab or sanctioned test
  • Ask for detection-oriented explanations alongside offensive configuration to get more balanced, defensible output
  • Verify all tool versions and syntax against official documentation, since the skill's examples are illustrative and may be outdated

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.