Python
t3l3machus/Villain
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
★ 4.5k
Stars
694 forks · 26 open issues
+1.3/day
Growth · measured
Stars counted between two of our own snapshots roughly a week apart. The repository page gives the exact span.
30.3
Momentum / 100
see the breakdown below
4y ago
Created
last push 17mo ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 6.9 | +1.3/day, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 12.9 | last week ran 1.86× the monthly pace |
| Freshness | 15 | 0.0 | last push 17mo ago; decays to zero at 180 days |
| Scale | 15 | 10.6 | 4.5k stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 30.3 | sum of the above |
Detail
| Topics | c2cybersecurityhackinghacking-tooloffensive-securityopen-sourcepenetration-testingpenetration-testing-toolspentestpentestingreadteamingredteamredteam-tools |
| Matched on | Security (cybersecurity, pentesting) |
| Short window | +9 stars over 7 days = 1.3/day |
| Long window | +18 stars over 26 days = 0.7/day |
| Lifetime average | 3.05 stars/day over 1,472 days |
| First seen here | 2026-10-11 |
| Last read | 2d ago |