Alternatives and similar repositories for goMalleable

Users that are interested in goMalleable are comparing it to the libraries listed below

• ck00004 / CobaltStrikeParser-Go

  View on GitHub
  ☆15Jul 12, 2023Updated 2 years ago
• Tw1sm / HTTPS-MalleableC2-Config

  View on GitHub
  Create Cobalt Strike malleable C2 profiles with HTTPS configs
  ☆18May 23, 2020Updated 5 years ago
• vestjoe / cobaltstrike_services

  View on GitHub
  AutoStart teamserver and listeners with services
  ☆75Dec 23, 2021Updated 4 years ago
• xx0hcd / Alt-Beacon-Payload

  View on GitHub
  Beacon payload using AV bypass method from https://github.com/fullmetalcache/CsharpMMNiceness and shellcode generated from https://github…
  ☆20Feb 9, 2021Updated 5 years ago
• GeorgePatsias / PayloadFactory

  View on GitHub
  C# implementation of Shellcode delivery techniques using PInvoke and DInvoke variations for API calling.
  ☆37Dec 20, 2021Updated 4 years ago
• Octoberfest7 / Proxy_Egress_Persistence

  View on GitHub
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆34Sep 15, 2022Updated 3 years ago
• EspressoCake / DefenderPathExclusions

  View on GitHub
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆32Nov 1, 2023Updated 2 years ago
• CrossC2 / autoRebind

  View on GitHub
  Automatically parse Malleable C2 profiled into CrossC2 rebinding library source code
  ☆21Feb 13, 2023Updated 3 years ago
• iammaguire / MeetC2

  View on GitHub
  Modular C2 framework aiming to ease post exploitation for red teamers.
  ☆193May 22, 2022Updated 3 years ago
• phith0n / vindicator

  View on GitHub
  Vindicator is a lightweight Golang library that is designed to hold and check any blocking function. e.g. subprocess, network connection.…
  ☆19Sep 24, 2022Updated 3 years ago
• Faran-17 / EarlyBird-APC-Injection

  View on GitHub
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆35Oct 31, 2023Updated 2 years ago
• Pwnd4 / DefenseEvasion

  View on GitHub
  Bypassing AV, EDR, Application Whitelisting and ASR Rules
  ☆13Apr 18, 2023Updated 2 years ago
• blurbdust / ldd2bh

  View on GitHub
  Convert ldapdomaindump to Bloodhound
  ☆80Dec 19, 2023Updated 2 years ago
• byt3bl33d3r / pyMalleableC2

  View on GitHub
  Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.
  ☆281Oct 29, 2024Updated last year
• RythmStick / ProxyPunch

  View on GitHub
  Finding SSL Blindspots for Red Teams
  ☆35Jul 28, 2020Updated 5 years ago
• GKNSB / HTMLSmuggler

  View on GitHub
  Smuggle a file to a user's browser
  ☆20Apr 16, 2022Updated 3 years ago
• aahmad097 / Test004

  View on GitHub
  Persistence via Shell Extensions
  ☆64Aug 4, 2023Updated 2 years ago
• Octoberfest7 / EventViewerUAC_BOF

  View on GitHub
  Beacon Object File implementation of Event Viewer deserialization UAC bypass
  ☆133May 6, 2022Updated 3 years ago
• D00Movenok / ctf-participation-bot

  View on GitHub
  ✅ CTF participation Telegram Bot
  ☆14Aug 5, 2022Updated 3 years ago
• georgesotiriadis / Chimera

  View on GitHub
  Automated DLL Sideloading Tool With EDR Evasion Capabilities
  ☆502Dec 19, 2023Updated 2 years ago
• boku7 / xPipe

  View on GitHub
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆93Mar 8, 2023Updated 2 years ago
• senzee1984 / InflativeLoading

  View on GitHub
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆325Apr 12, 2024Updated last year
• nopbrick / SeeProxy

  View on GitHub
  Golang reverse proxy with CobaltStrike malleable profile validation.
  ☆109Jan 19, 2023Updated 3 years ago
• XiaoliChan / RedCaddy

  View on GitHub
  C2 redirector base on caddy
  ☆214May 28, 2024Updated last year
• Tylous / SourcePoint

  View on GitHub
  SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
  ☆1,192Apr 16, 2025Updated 10 months ago
• akkuman / gSigFlip

  View on GitHub
  A SigFlip implement in golang
  ☆51Jan 5, 2022Updated 4 years ago
• icyguider / LightsOut

  View on GitHub
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆329Jul 15, 2024Updated last year
• 0xthirteen / PerfExec

  View on GitHub
  ☆80Aug 2, 2023Updated 2 years ago
• Octoberfest7 / MemFiles

  View on GitHub
  A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk
  ☆474Jul 6, 2024Updated last year
• D3Ext / Hooka

  View on GitHub
  Shellcode loader generator with multiples features
  ☆505Dec 31, 2024Updated last year
• RobinFassinaMoschiniForks / TransitionalPeriod

  View on GitHub
  Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits
  ☆31Jun 14, 2022Updated 3 years ago
• sairson / WebGuard

  View on GitHub
  WebGuard是根据 风起师傅的RedGuard 和 mgeeky师傅的RedWarden结合出来的http请求过滤器go包，亦在帮助采用go编写C2 http监听器做流量过滤和规则匹配
  ☆29Jun 26, 2022Updated 3 years ago
• 0x3rhy / BOF-DCOMPotato-PrintNotify

  View on GitHub
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆13Feb 4, 2024Updated 2 years ago
• luoqeng / webshell

  View on GitHub
  webshell golang implementation
  ☆10Dec 26, 2019Updated 6 years ago
• chvancooten / nimbuild

  View on GitHub
  A Docker container used to easily compile Nim binaries generated by my tools (NimPackt and NimPlant)
  ☆16Aug 31, 2023Updated 2 years ago
• m7rick / Havoc-DLLHijack

  View on GitHub
  A tool to assist DLL hijacking via the Havoc GUI
  ☆12Jan 9, 2024Updated 2 years ago
• gavz / ExplorerPersist

  View on GitHub
  Explorer Persistence technique : Hijacking cscapi.dll order loading path and writing our malicious dll into C:\Windows\cscapi.dll , when …
  ☆83Jan 12, 2023Updated 3 years ago
• ceramicskate0 / BOF-Builder

  View on GitHub
  C# .Net 5.0 project to build BOF (Beacon Object Files) in mass
  ☆25Jul 25, 2023Updated 2 years ago
• D00Movenok / BounceBack

  View on GitHub
  ↕️🤫 Stealth redirector for your red team operation security
  ☆1,064Jul 6, 2025Updated 7 months ago