AdaptixC2
Extensible open source post-exploitation framework with a Go server and cross-platform agents.
Technical Architecture & Overview
AdaptixC2 is a newer open source C2 framework with a graphical client, Go-based server, and extensible listener and agent plugins. Unit 42 reported in September 2025 that threat actors use the framework in real-world attacks, which makes its indicators relevant to defenders too.
Targeted Technical Use Cases
Authorized engagements wanting a flexible modern C2, and detection teams tracking its in-the-wild use.
Evaluation & Trade-offs
Core Strengths
- +Qt GUI client that runs on Linux, Windows, and macOS.
- +Plugin architecture for listeners and agents.
- +Public threat research, such as the Unit 42 analysis, documents its in-the-wild use.
Trade-Offs & Limitations
- -Threat actor adoption means operation requires strict authorization discipline.
Defensive Security Application
Emulation exercises and detection engineering against a C2 seen in real intrusions.
Frequently Asked Questions
What is AdaptixC2?→
AdaptixC2 is a newer open source C2 framework with a graphical client, Go-based server, and extensible listener and agent plugins. Unit 42 reported in September 2025 that threat actors use the framework in real-world attacks, which makes its indicators relevant to defenders too.
What is AdaptixC2 used for?→
Authorized engagements wanting a flexible modern C2, and detection teams tracking its in-the-wild use.
What are the strengths of AdaptixC2?→
- +Qt GUI client that runs on Linux, Windows, and macOS.
- +Plugin architecture for listeners and agents.
- +Public threat research, such as the Unit 42 analysis, documents its in-the-wild use.
What are the limitations of AdaptixC2?→
- +Threat actor adoption means operation requires strict authorization discipline.
How is AdaptixC2 used defensively?→
Emulation exercises and detection engineering against a C2 seen in real intrusions.