A small collective of security researchers focused on Offensive Research & Development.
Whispergate builds open-source tooling for offensive security professionals. Our work covers the full red team lifecycle, from initial access and payload development through command & control infrastructure, all the way to ICS/OT security research and training range automation.
A significant portion of our work extends the Mythic command and control framework. We develop and maintain custom agents, an alternative web UI, initial access wrappers, malleable profile generators, and integration tooling, giving operators a more complete and flexible Mythic experience out of the box.
We research and release tools across the offensive development space: PIC shellcode agents, VM-based loaders, exfiltration frameworks, kernel exploitation plugins, and evasion utilities. Everything is built with real-world operator workflows in mind.
We build and maintain tooling focused on protecting and managing red team infrastructure. This includes C2 redirection proxies, traffic filtering, redirector deployment automation, domain and email warming utilities, and payload hosting. Keeping operator infrastructure resilient and attribution-resistant is a core focus.
Our ICS work centers on multi-protocol OT security frameworks and training content for industrial control system environments. We build tooling that lets security teams safely discover, enumerate, and validate OT assets in authorized lab settings.
We maintain a growing library of Ludus Ansible roles that let teams spin up full red/blue training environments in minutes, covering everything from C2 teamservers and redirectors to SIEM stacks, incident response platforms, and vulnerable Active Directory configurations.
- GitHub: github.com/Whispergate
- Blog: blog.whispergate.org
- Contact: contact@whispergate.org
