Cybersecurity toolkits · Rank #43
OctoC2
Grade C: derived only from the two verdicts below. How grades work
GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.
Why this verdict
How we check →- No commits in 90 days; last commit 93 days ago. receipt ↗
- Not counted in verdict: TypeScript 5 → 7. receipt ↗
Snapshot: commit cee1d45 on main, checked 2026-10-19 07:21 UTC. Receipts link to files at this exact commit.
Dependency freshness
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What the README says you get
- OtherEncrypted multi-channel transport
encrypted multi-channel transport and resilient failover
- OtherRelayed proxy paths
a signed two-repository proxy, relay consortium, and Codespaces SSH tunnel
- OtherEd25519 beacon identity
persists its Ed25519 identity and task ledger
- OtherSigned task protocol
share one signed task protocol, one identity model
- OtherExclusive delivery leases
Exclusive delivery leases prevent competing transports from claiming one task
- OtherDurable replay state
Durable replay state and the beacon task ledger survive restarts
- OtherOpt-in loopback listeners
Network listeners are opt-in and loopback-first
- OtherTLS-only HTTP
HTTP is TLS-only; gRPC requires mTLS
- OtherPer-beacon certificates
a distinct client certificate per beacon, and an exact SHA-256 certificate fingerprint binding
- UILocal operator dashboard
Local operator interface for beacon and task activity
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 4 unverifiable items were discarded. A README claim is the maker's description, not something we tested.
Watch OctoC2
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Slowing | Deps unknown | 0 |
| Oct 12, 2026 | Steady | Deps unknown | 9 |
| Sep 29, 2026 | Steady | Deps unknown | 9 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit cee1d45)
- server/package.json ↗ declared dependency versions and stack (at commit cee1d45)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)