The latest articles on DEV Community by wade calvin (@wadecalvin9). https://dev.to/wadecalvin9 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3897733%2Fa5d88cab-c2df-4b64-bbed-39ca4bf55031.jpg https://dev.to/wadecalvin9 en wade calvin Sat, 25 Apr 2026 16:00:19 +0000 https://dev.to/wadecalvin9/bytecode-c2-is-now-open-source-a-c2-framework-that-actually-bypasses-defender-5g5m https://dev.to/wadecalvin9/bytecode-c2-is-now-open-source-a-c2-framework-that-actually-bypasses-defender-5g5m <p>You're on a red team engagement. You generate a Havoc payload. You execute it on Windows 11. Windows Defender catches it immediately.</p> <p>This happened to me. Repeatedly.</p> <p>Stock open-source C2 frameworks (Havoc, Sliver, Covenant) are heavily signatured. EDR vendors have had years to reverse them. The signatures aren't just for the binaries anymore—they're for the <em>behaviors</em>.</p> <p>I decided to build a new C2 framework called <strong>ByteCode</strong> from scratch, with one priority: <strong>evasion</strong>.</p> <p>Repo: <a href="https://github.com/wadecalvin9/ByteCode" rel="noopener noreferrer">https://github.com/wadecalvin9/ByteCode</a></p> cybersecurity security opensource news