CrossC2
CrossC2 is a cross-platform payload generator that extends CobaltStrike's capabilities to Linux and macOS environments for red team operations.
CrossC2 is a cross-platform payload generator that extends CobaltStrike's capabilities to Linux and macOS environments for red team operations.
Checked October 2026.
CrossC2 is a cross-platform payload generation tool designed to extend CobaltStrike's capabilities beyond Windows environments.
The tool enables security professionals and red team operators to create payloads that can execute on multiple operating systems including Linux and macOS.
CrossC2 integrates with the CobaltStrike framework to provide command and control functionality across heterogeneous environments.
The tool supports various payload formats and delivery mechanisms to facilitate post-exploitation activities on non-Windows targets.
It maintains compatibility with CobaltStrike's existing infrastructure while extending operational reach to Unix-based systems.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about CrossC2: features, pricing and alternatives.
CrossC2 is a product in the Red-Team & Adversary Emulation category. It covers Post Exploitation, C2 and Red Team.
CrossC2 is free. Download and setup instructions are at https://github.com/gloxec/CrossC2/.
Alternatives to CrossC2 listed on CybersecTools:
Compare all CrossC2 alternatives at https://cybersectools.com/alternatives/crossc2
CrossC2 is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A post-exploitation tool for pentesting Active Directory
CrackMapExec (CME) - A tool for querying internal database for host and credential information in cybersecurity.
Red/purple team and identity security assessment service simulating real adversary attacks
Darkarmour is an open-source Windows antivirus evasion framework that enables security professionals to bypass antivirus detection through customizable obfuscation and anti-analysis techniques.
A demonstration of a method to delete a locked executable or currently running file from disk.
A managed code hooking template for .NET assemblies, enabling API hooking, code injection, and runtime manipulation.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
