Command and control framework
☆40Jun 20, 2026Updated 4 months ago
Alternatives and similar repositories for crystal-c2
Users that are interested in crystal-c2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 2 months ago
- SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled…☆89Updated this week
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated last year
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated 3 weeks ago
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆25Jul 31, 2026Updated 3 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆135Sep 6, 2026Updated 2 months ago
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆97Oct 27, 2026Updated last week
- Atomic test units for BOF execution☆62Apr 26, 2026Updated 6 months ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆50Oct 27, 2026Updated last week
- ☆46Jul 1, 2026Updated 4 months ago
- A modern alternative Web-UI for the Mythic Command and Control Server☆84Updated this week
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆98Feb 6, 2026Updated 9 months ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆94Oct 10, 2026Updated 3 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 4 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆144Aug 13, 2026Updated 2 months ago
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆98Updated this week
- Evasion kit for Cobalt Strike☆511Updated this week
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆335Oct 22, 2026Updated 2 weeks ago
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- 🧠 The ultimate resource for finding Beacon Object Files (BOFs).☆170Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆17Sep 21, 2026Updated last month
- Crystal Palace Evasion kit for Sliver☆126Jun 13, 2026Updated 4 months ago
- Async BOF that notifies the operator when a user connects to a local or remote target system.☆34Jul 30, 2026Updated 3 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆74Oct 5, 2026Updated last month
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 7 months ago
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆151Oct 7, 2026Updated last month
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆10Feb 16, 2026Updated 8 months ago
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 4 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆112Oct 11, 2026Updated 3 weeks ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- Evasive shellcode loader for Red Teaming☆20Aug 15, 2025Updated last year
- CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory☆30Jul 17, 2026Updated 3 months ago