CodeXTF2 / WindowSpyLinks
WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.
☆279Updated 9 months ago
Alternatives and similar repositories for WindowSpy
Users that are interested in WindowSpy are comparing it to the libraries listed below
Sorting:
- A shellcode injection tool showcasing various process injection techniques☆136Updated 2 years ago
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆154Updated last year
- Documents Exfiltration project for fun and educational purposes☆144Updated 2 years ago
- Evasive Golang Loader☆138Updated last year
- ☆163Updated 2 years ago
- Github as C2 Demonstration , free API = free C2 Infrastructure☆143Updated 2 years ago
- Set of python scripts which perform different ways of command execution via WMI protocol.☆163Updated 2 years ago
- RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++☆254Updated 2 years ago
- ☆169Updated last year
- Patching AmsiOpenSession by forcing an error branching☆150Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.☆309Updated 3 years ago
- ☆220Updated last year
- Execute shellcode files with rundll32☆212Updated last year
- Execute shellcode from a remote-hosted bin file using Winhttp.☆239Updated 2 years ago
- A collection of Cobalt Strike Aggressor scripts.☆106Updated 3 years ago
- AV bypass while you sip your Chai!☆224Updated last year
- PowerShell runner for executing malicious payloads in order to bypass Windows Defender.☆73Updated 4 years ago
- 「💀」Proof of concept on BYOVD attack☆165Updated last year
- Collection of random RedTeam scripts.☆207Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆102Updated 8 months ago
- Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles☆200Updated last year
- 🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.☆158Updated 2 years ago
- yet another AV killer tool using BYOVD☆299Updated last year
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆301Updated 3 years ago
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆308Updated last year
- An aggressor script that can help automate payload building in Cobalt Strike☆118Updated last year
- ☆245Updated 2 years ago
- ☆166Updated 3 years ago
- An updated version of keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard in…☆104Updated 2 years ago
- C or BOF file to extract WebKit master key to decrypt user cookie☆207Updated last year