TrevorC2 - Legitimate Covert C2 over Browser Emulation

TrustedSec announced TrevorC2, an open-source HTTP(s) command-and-control framework that masks C2 by cloning a legitimate website and hiding commands in page source parameters; clients poll the site at configurable intervals and exfiltrate command output via base64-encoded query parameters. The release describes server/client setup and usage, supported platforms (Windows, macOS, Linux), and TODO features (encryption, randomized parameters, additional language modules), highlighting its focus on evasion rather than reporting active exploitation.