Alternatives and similar repositories for evilreplay

Users that are interested in evilreplay are comparing it to the libraries listed below

• IncludeSecurity / c2-vulnerabilities
  PoCs of RCEs against open source C2 servers
  ☆87Updated last year
• 0xbigshaq / CVE-2025-25257
  FortiWeb CVE-2025-25257 exploit
  ☆62Updated 4 months ago
• jiansiting / CVE-2025-59287
  WSUS Unauthenticated RCE
  ☆152Updated 2 weeks ago
• Darkrain2009 / RedExt
  Chrome browser extension-based Command & Control
  ☆196Updated 4 months ago
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆196Updated last year
• quarkslab / proxyblob
  SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication.
  ☆254Updated 6 months ago
• MultSec / MultCheck
  Identifies bad bytes from static analysis with any Anti-Virus scanner.
  ☆129Updated last year
• irsdl / ysonet
  Deserialization payload generator for a variety of .NET formatters
  ☆136Updated 3 months ago
• b3rito / peeko
  peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
  ☆217Updated 7 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆188Updated 11 months ago
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆145Updated 10 months ago
• d1rkmtrr / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆142Updated 2 years ago
• BishopFox / cve-2024-21762-check
  Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762
  ☆106Updated last year
• decoder-it / TokenStealer
  ☆163Updated 2 years ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 9 months ago
• sliverarmory / armory
  The Official Sliver Armory
  ☆118Updated 6 months ago
• Wh04m1001 / CVE-2024-20656
  ☆137Updated last year
• MzHmO / psexec_noinstall
  Repository contains psexec, which will help to exploit the forgotten pipe
  ☆171Updated last year
• synacktiv / bbs
  bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or ch…
  ☆92Updated 4 months ago
• SySS-Research / MAT
  This tool, programmed in C#, allows for the fast discovery and exploitation of vulnerabilities in MSSQL servers
  ☆53Updated last year
• v1k1ngfr / fuegoshell
  Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445
  ☆53Updated last year
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• mlcsec / proctools
  Small toolkit for extracting information and dumping sensitive strings from Windows processes
  ☆115Updated last year
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆154Updated last year
• RedSiege / DigDug
  ☆83Updated last year
• byinarie / teams_dump
  PoC for dumping and decrypting cookies in the latest version of Microsoft Teams
  ☆131Updated 2 years ago
• 0xv1n / RemoteSessionEnum
  Remotely Enumerate sessions using undocumented Windows Station APIs
  ☆119Updated last year
• DarkSpaceSecurity / SSH-Stealer
  Smart keylogging capability to steal SSH Credentials including password & Private Key
  ☆146Updated 7 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆80Updated last week
• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆74Updated last year