Alternatives and similar repositories for evilreplay

Users that are interested in evilreplay are comparing it to the libraries listed below

• 0xbigshaq / CVE-2025-25257
  FortiWeb CVE-2025-25257 exploit
  ☆63Updated 6 months ago
• irsdl / ysonet
  Deserialization payload generator for a variety of .NET formatters
  ☆169Updated last month
• IncludeSecurity / c2-vulnerabilities
  PoCs of RCEs against open source C2 servers
  ☆89Updated last year
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆200Updated last year
• b3rito / peeko
  peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
  ☆220Updated 9 months ago
• jiansiting / CVE-2025-59287
  WSUS Unauthenticated RCE
  ☆167Updated 2 months ago
• quarkslab / proxyblob
  SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication.
  ☆257Updated 8 months ago
• Darkrain2009 / RedExt
  Chrome browser extension-based Command & Control
  ☆228Updated 6 months ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 11 months ago
• synacktiv / bbs
  bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or ch…
  ☆94Updated 6 months ago
• MultSec / MultCheck
  Identifies bad bytes from static analysis with any Anti-Virus scanner.
  ☆128Updated last year
• BishopFox / cve-2024-21762-check
  Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762
  ☆106Updated last year
• sfewer-r7 / CVE-2023-34362
  CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
  ☆64Updated last year
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆86Updated 2 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆149Updated last year
• byinarie / teams_dump
  PoC for dumping and decrypting cookies in the latest version of Microsoft Teams
  ☆132Updated 2 years ago
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆146Updated last year
• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆74Updated last year
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆145Updated 2 years ago
• mlcsec / proctools
  Small toolkit for extracting information and dumping sensitive strings from Windows processes
  ☆115Updated last year
• blackarrowsec / Handly
  Abuse leaked token handles.
  ☆134Updated 2 years ago
• RedSiege / DigDug
  ☆85Updated last year
• sliverarmory / armory
  The Official Sliver Armory
  ☆124Updated 8 months ago
• 0xEr3bus / RdpStrike
  Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
  ☆249Updated last year
• v1k1ngfr / fuegoshell
  Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445
  ☆53Updated last year
• ricardojoserf / SAMDump
  Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation
  ☆263Updated 3 weeks ago
• duck-sec / CVE-2023-28252-Compiled-exe
  A modification to fortra's CVE-2023-28252 exploit, compiled to exe
  ☆54Updated last year
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆190Updated last year
• mertdas / RedPersist
  ☆222Updated last year
• Wh04m1001 / CVE-2024-20656
  ☆136Updated 2 years ago