GH Repository · Ne0nd0g
merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- stars
- 5,604
- 30-day movement
- +10/day
- Related entries
- 60
- Connections
- 1
makegodockeragent-appGoagentpost-exploitationc2command-and-controlgolanghttp2
Merlin is a cross-platform post-exploitation Command & Control tool consisting of a server and an agent, both written in Go. It uses HTTP/2 as its communication protocol between the agent and the C2 server.
You reach for it when you need a cross-platform, HTTP/2-based C2 framework for post-exploitation operations.
Use it to
- Run a post-exploitation C2 server
- Deploy agents communicating over HTTP/2
- Build the server and agent from source with Go
- Operate the toolchain via Docker or Make
For Red teamers and penetration testers
- Role
- agent-app
- Language
- Go
- Licence
- GPL-3.0
- Forks
- 837
- Open issues
- 17
- Last push
- 2025-04-17
- Latest release
- v0.1-beta · 2017-06-10
topicshttp2command-and-controlc2golangpost-exploitationagent