0xthirteen / StayKit

Related projects ⓘ

Alternatives and complementary repositories for StayKit

• 0xthirteen / MoveKit
  Cobalt Strike kit for Lateral Movement
  ☆647Updated 4 years ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆466Updated 2 years ago
• ajpc500 / BOFs
  Collection of Beacon Object Files
  ☆552Updated 2 years ago
• CCob / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆679Updated 2 months ago
• 0xthirteen / SharpMove
  .NET Project for performing Authenticated Remote Execution
  ☆379Updated last year
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆429Updated last year
• rvrsh3ll / BOF_Collection
  Various Cobalt Strike BOFs
  ☆581Updated 2 years ago
• FuzzySecurity / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆703Updated 11 months ago
• RCStep / CSSG
  Cobalt Strike Shellcode Generator
  ☆636Updated 10 months ago
• S3cur3Th1sSh1t / Invoke-SharpLoader
  ☆349Updated 3 years ago
• GeorgePatsias / ScareCrow-CobaltStrike
  Cobalt Strike script for ScareCrow payloads intergration (EDR/AV evasion)
  ☆457Updated 2 years ago
• threatexpress / cs2modrewrite
  Convert Cobalt Strike profiles to modrewrite scripts
  ☆583Updated last year
• anthemtotheego / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆609Updated last year
• 0xthirteen / SharpStay
  .NET project for installing Persistence
  ☆454Updated 4 months ago
• outflanknl / Spray-AD
  A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.
  ☆425Updated 2 years ago
• JamesCooteUK / SharpSphere
  .NET Project for Attacking vCenter
  ☆538Updated 3 years ago
• deepinstinct / LsassSilentProcessExit
  Command line interface to dump LSASS memory to disk via SilentProcessExit
  ☆442Updated 3 years ago
• boku7 / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆377Updated last year
• hausec / ProxyLogon
  ☆290Updated 4 months ago
• Yaxser / CobaltStrike-BOF
  Collection of beacon BOF written to learn windows and cobaltstrike
  ☆340Updated last year
• jfmaes / SharpZipRunner
  Executes position independent shellcode from an encrypted zip
  ☆300Updated 3 years ago
• threatexpress / random_c2_profile
  Cobalt Strike random C2 Profile generator
  ☆627Updated last year
• dcsync / pycobalt
  Cobalt Strike Python API
  ☆292Updated 2 years ago
• S3cur3Th1sSh1t / MultiPotato
  ☆499Updated 3 years ago
• mgeeky / cobalt-arsenal
  My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+
  ☆1,036Updated last year
• codewhitesec / HandleKatz
  PIC lsass dumper using cloned handles
  ☆573Updated 2 years ago