EvilBytecode / GoRedOps
🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.
☆396Updated last month
Related projects: ⓘ
- PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.☆378Updated 11 months ago
- DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYS…☆302Updated last month
- ↕️🤫 Stealth redirector for your red team operation security☆613Updated last month
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆539Updated 2 months ago
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆485Updated last month
- A collection of offensive Go packages inspired by different Go repositories.☆203Updated 3 months ago
- Golang library for malware development☆309Updated 7 months ago
- Golang weaponization for red teamers.☆467Updated 8 months ago
- A command and control framework written in rust.☆245Updated this week
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆465Updated 2 months ago
- Real fucking shellcode encryptor & obfuscator tool☆630Updated 4 months ago
- HookChain: A new perspective for Bypassing EDR Solutions☆293Updated 3 weeks ago
- A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…☆439Updated 3 months ago
- Customizable Linux Persistence Tool for Security Research and Detection Engineering.☆371Updated 2 weeks ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆448Updated 6 months ago
- Simulate the behavior of AV/EDR for malware development training.☆443Updated 7 months ago
- Demonized Shell is an Advanced Tool for persistence in linux.☆295Updated 3 weeks ago
- Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver☆228Updated 2 months ago
- ☆196Updated this week
- Escalate Service Account To LocalSystem via Kerberos☆387Updated last year
- Kraken, a modular multi-language webshell coded by @secu_x11☆509Updated 7 months ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆240Updated last year
- shellcode loader for your evasion needs☆257Updated 3 months ago
- Tool to remotely dump secrets from the Windows registry☆388Updated last month
- Dump cookies and credentials directly from Chrome/Edge process memory☆902Updated last week
- Materials for the workshop "Red Team Ops: Havoc 101"☆325Updated last year
- MultiPlatform HTTP Reverse Shell☆227Updated 6 months ago
- A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.☆360Updated 2 months ago
- Useful C2 techniques and cheatsheets learned from engagements☆415Updated last month