Repo to the corresponding blog post about implant P2P communications.
☆13Dec 7, 2025Updated 11 months ago
Alternatives and similar repositories for NebulaPOC
Users that are interested in NebulaPOC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The only non-vegan C2 Framework☆11Jan 30, 2022Updated 4 years ago
- CVE-2020-1337 a bypass of (PrintDemon) CVE-2020-1048’s patch☆16Aug 11, 2020Updated 6 years ago
- Exploit for ToolShell☆15Nov 20, 2025Updated 11 months ago
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- Selective In-Memory Syscall Unhooking, a stealthy method to bypass user-mode hooks in ntdll.dll☆47Mar 11, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- some research on EDR deconditioning☆16Jun 4, 2026Updated 5 months ago
- Things i do because i saw it on twitter on a weekend☆56Jul 20, 2025Updated last year
- A cross-platform, collaborative C2 for red-teaming. Agents are cross-compilable (e.g, you can generate Windows DLLs on Linux), cross-comp…☆23Mar 7, 2025Updated last year
- Logging tool intended for red team usage☆40Sep 30, 2026Updated last month
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆19Mar 19, 2025Updated last year
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆118Jan 20, 2025Updated last year
- Pipeline for creating shellcode from a nostd rust project.☆28Jul 11, 2024Updated 2 years ago
- JA4 proxy tooling.☆27Feb 10, 2026Updated 8 months ago
- ☆16Jul 7, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A small How-To on creating your own weaponized WSL file☆132Jul 23, 2025Updated last year
- ☆37Aug 21, 2024Updated 2 years ago
- A C++ header file that obfuscates code to enhance security by preventing reverse engineering and static analysis through control flow man…☆15Feb 25, 2025Updated last year
- LibWinHttp is a simplified WinHTTP wrapper designed as a Crystal Palace shared library for implant development. Its primary purpose is to…☆49Nov 4, 2025Updated last year
- Repository for the DEF CON 33 talk: Kill Chain Reloaded☆86Aug 3, 2025Updated last year
- various methods of making API calls☆19Feb 1, 2025Updated last year
- Advanced Malware Dropper & Evasion Toolkit for Authorized Red Teaming☆16Nov 24, 2025Updated 11 months ago
- Serving payloads only to allowed processes using Windows projected file system feature☆26Feb 7, 2026Updated 9 months ago
- Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.☆263Aug 4, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆17Jul 23, 2024Updated 2 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆137Dec 23, 2025Updated 10 months ago
- Memory API proxy via signed mozglue.dll☆41Jun 25, 2026Updated 4 months ago
- ☆28Dec 28, 2017Updated 8 years ago
- A Sliver C2 modification utility that enhances operational stealth by renaming protobuf definitions, regenerating protocol buffers, updat…☆26Oct 23, 2025Updated last year
- Use of in-memory string scans to outsmart reverse engineers☆20Nov 20, 2024Updated last year
- A critical RCE vulnerability in Windows TCP/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hija…☆33Sep 16, 2025Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆50Dec 4, 2023Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- IPsec/IKEv2 Library☆15Sep 29, 2026Updated last month
- quASAR: ASAR manipulation made easy☆38Sep 7, 2022Updated 4 years ago
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 10 months ago
- ☆31Nov 25, 2025Updated 11 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Example of call stack spoofing trough the construction of syntetic frames and stack manipulation☆45Jan 17, 2026Updated 9 months ago
- Collection of BOFs for Cobalt Strike☆32Mar 28, 2023Updated 3 years ago