BlackSnufkin

BlackSnufkin / Cheshire

Public

Adaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.

c2 evasion-techniques malware-analysis malware-development opsec
19
2
69% credibility
Found May 05, 2026 at 19 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
NetLinx
AI Summary

Cheshire is a dashboard plugin that connects a payload analysis sandbox to the Adaptix control framework for testing binaries against static, dynamic, and endpoint detection tools.

How It Works

1
📖 Discover Cheshire

You hear about Cheshire, a handy bridge that lets you test files for security triggers right from your main control dashboard.

2
🐱 Set up the playground

First, get a safe virtual testing area called LitterBox running so files can be examined without any real-world risk.

3
🔧 Add Cheshire to your toolkit

Use a quick setup helper to place Cheshire into your Adaptix control center.

4
🔗 Connect and launch

Point Cheshire to your playground and restart the control center – you'll see it's ready in the logs.

5
💻 Upload and test your file

In the Cheshire dashboard, pick a file, choose scan options like quick check or full EDR test, and start the analysis.

6
📊 Watch results roll in

Live updates show detections from scans, with a progress bar and summary table highlighting any issues.

7
🧹 Clean up automatically

When done, everything tidies itself up so no leftover files hang around.

✅ Get your safety verdict

You receive a clear headline like 'Detected' or 'Clean' with details, helping you confidently decide if the file is good to go.

Sign up to see the full architecture

6 more

Sign Up Free

Star Growth

See how this repo grew from 19 to 19 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is Cheshire?

Cheshire is an Adaptix C2 plugin that drives LitterBox payload analysis straight from the operator UI, like the Cheshire cat grinning between chameleon-like Adaptix and grumpy-cat LitterBox. Upload any binary, select EDR profiles like Elastic Defend, and run parallel static (YARA, CheckPlz), dynamic (PE-Sieve, Moneta), or full scans—getting verdicts, severity-sorted tables, and live progress without leaving the dashboard. Built in Go with AXScript UI, it handles uploads, fleet probes, and auto-cleanup via LitterBox REST endpoints.

Why is it gaining traction?

Seamless UI integration beats CLI-hopping: "Run All" parallelizes everything, streams EDR alerts with adaptive polling (2s ticks, backoff to 15s), and aggregates hits into sortable summaries with MITRE details. No stale samples—dialog close triggers cleanup. In the GitHub Adaptix framework scene, it's the hook for operators tired of fragmented analysis tools.

Who should use this?

Red team operators on Adaptix C2 with a LitterBox sandbox, vetting implants pre-deployment against multiple EDRs and scanners. Teams probing payloads for YARA hits or dynamic hooks before raids, especially if managing Elastic or Fibratus fleets.

Verdict

Grab it if you're deep in Adaptix/LitterBox—setup script deploys fast, docs cover dashboard flows precisely—but 19 stars and 0.699999988079071% credibility score flag low adoption and early maturity. Test in staging; production needs more battle scars.

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.