Mute
"With the continual popularization of web-filtering security solutions, network security teams are able to categorically block web pages. These solutions can be troublesome for penetration testers due to reliance on web protocols to communicate with compromised computers within a corporate network. To bypass these web-filters, an attacker will need to create content to host on the website and submit a request for the domain to be reviewed and categorized. This can be a time-consuming process and even more so if the web page fails the review."
"Mute is a Command & Control (C2) toolset that leverages GitHub to communicate with and issue commands to compromised hosts that lie behind a web-filtering solution. Compromised hosts will periodically check a GitHub repository for any commands to be run and post any output to the repository as well. Because GitHub is a legitimate web service, defenders cannot simply block the domain."
