Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
| Date | Stars |
|---|---|
| 2026-07-31 | 5581 |
| 2026-08-02 | 5581 |
| 2026-08-03 | 5585 |
| 2026-08-06 | 5585 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
[](https://github.com/Ne0nd0g/merlin/actions/workflows/codeql.yml)
[](https://goreportcard.com/report/github.com/Ne0nd0g/merlin)
[](https://www.gnu.org/licenses/gpl-3.0)
[](https://github.com/Ne0nd0g/merlin/releases/latest)
[](https://github.com/Ne0nd0g/merlin/releases)
[](https://twitter.com/merlin_c2)
# Merlin
<p align="center">
<img alt="Merlin Logo" src="docs/images/merlin.png" height="30%" width="30%">
</p>
Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.
Highlighted features:
- [merlin-cli](https://github.com/Ne0nd0g/merlin-cli) command line interface over gRPC to connect to the Merlin Server facilitating multi-user support
- Supported Agent C2 Protocols: http/1.1 clear-text, http/1.1 over TLS, HTTP/2, HTTP/2 clear-text (h2c), http/3 (http/2 over QUIC)
- Peer-to-peer (P2P) communication between Agents with bind or reverse for SMB, TCP, and UDP
- Configurable agent data encoding and encryption transforms: AES, Base64, gob, hex, JWE, RC4, and XOR
- JWE transform use [PBES2_HS512_A256KW](https://tools.ietf.org/html/rfc7518#section-4.8) PBES2 (RFC 2898) with HMAC
SHA-512 as the PRF and AES Key Wrap (RFC 3394) using 256-bit keys for the encryption scheme
- Configurable agent authenticators:
- None: No authentication
- [OPAQUE](https://tools.ietf.org/html/draft-krawczyk-cfrg-opaque-00): Asymmetric Password Authenticated Key Exchange (PAKE)
- Encrypted JWT for message authentication
- Configurable Agent message data [padding](https://merlin-c2.readthedocs.io/en/latest/agent/cli.html#padding)
to combat beaconing detections based on a fixed message size
- Execute .NET assemblies in-process with `invoke-assembly` or in a sacrificial process with `execute-assembly`
- Execute arbitrary Windows executables (PE) in a sacrificial process with `execute-pe`
- Various shellcode execution techniques: CreateThread, CreateRemoteThread, RtlCreateUserThread, QueueUserAPC
- Integrated [Donut](https://github.com/Binject/go-donut), [sRDI](https://github.com/monoxgas/sRDI),
and [SharpGen](https://github.com/cobbr/SharpGen) support
- Dynamically change the Agent's [JA3](https://merlin-c2.readthedocs.io/en/latest/agent/cli.html#ja3) hash
- [Mythic](#mythic) support
- [Documentation & Wiki](https://merlin-c2.readthedocs.io/en/latest/)
An introductory blog post can be found here: <https://medium.com/@Ne0nd0g/introducing-merlin-645da3c635a>
Supporting Repositories:
- [Merlin Agent](https://github.com/Ne0nd0g/merlin-agent) - Agent source code
- [Merlin Agent DLL](https://github.com/Ne0nd0g/merlin-agent-dll) - Agent DLL source code
- [Merlin CLI](https://github.com/Ne0nd0g/merlin-cli) - Command line interface for Merlin
- [Merlin Documentation](https://github.com/Ne0nd0g/merlin-documentation) - Documentation source code
- [Merlin on Mythic](https://github.com/MythicAgents/merlin) - Merlin agent for Mythic Framework
- [Merlin Docker](https://github.com/Ne0nd0g/merlin-docker) - Base Docker image for for Merlin images
- [Merlin Message](https://github.com/Ne0nd0g/merlin-message) - A Go library for Merlin messages exchanged between a Merlin Server and Agent
## Quick Start
1. Download the latest version of Merlin Server from the [releases](https://github.com/Ne0nd0g/merlin/releases) section
> The Server package contains compiled versions of the CLI and Agent for all the major operating systems in the `data/bin` directory
2. Extract the files with 7zip using the `x` function **The password is: `merlin`**
3. Start MerliExcerpt of 6,119 characters
Read on GitHub
698
24
23
C_Sto · Australia
18
Alex Flores · United States
12
10
7
Matt Kiely
5
3
3
1
Idan Bidani
1
1
1
1
Would you bet a product on this? Bounded 0–100 and slow moving.
Not classified yet. Classification runs as part of npm run ingest.