Shadow Workers
Shadow Workers is an open source C2 framework and proxy tool for penetration testers to exploit XSS vulnerabilities and malicious Service Workers.
Shadow Workers is an open source C2 framework and proxy tool for penetration testers to exploit XSS vulnerabilities and malicious Service Workers.
Checked October 2026.
Shadow Workers is an open source command and control (C2) framework and proxy tool designed for penetration testing activities.
The tool focuses on exploiting Cross-Site Scripting (XSS) vulnerabilities and malicious Service Workers to establish command and control channels.
It provides an interface for creating and managing C2 servers, enabling penetration testers to test and exploit web application vulnerabilities.
The framework supports proxy functionality to facilitate communication between compromised targets and the C2 infrastructure.
Shadow Workers is specifically designed to assist security researchers and penetration testers in assessing web application security through Service Worker exploitation techniques.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Shadow Workers: features, pricing and alternatives.
Shadow Workers is a product in the Red-Team & Adversary Emulation category. It covers C2, Proxy and Open Source.
Shadow Workers is free. Download and setup instructions are at https://github.com/shadow-workers/shadow-workers/.
Alternatives to Shadow Workers listed on CybersecTools:
Compare all Shadow Workers alternatives at https://cybersectools.com/alternatives/shadow-workers
Shadow Workers is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Comprehensive host-survey tool for security checks in C#.
A tutorial on how to use Apache mod_rewrite to randomly serve payloads in phishing attacks
A post-exploitation framework designed to operate covertly on heavily monitored environments.
SharpC2 is a C#-based Command and Control framework that provides remote access capabilities for penetration testing and red team operations.
SharpEDRChecker scans system components to detect security products and tools.
A payload creation framework for generating and executing C# code payloads with anti-evasion capabilities for offensive security operations.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
