⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX files. Supports HTTP callbacks, SMB, and WebDAV for credential harvesting.
☆22Dec 23, 2025Updated 9 months ago
Alternatives and similar repositories for SheetStrike
Users that are interested in SheetStrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆26Jul 11, 2025Updated last year
- A Sliver C2 modification utility that enhances operational stealth by renaming protobuf definitions, regenerating protocol buffers, updat…☆25Oct 23, 2025Updated 11 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 5 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- C# to read WIM files over the network without transferring the whole file☆39Jan 22, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Chisel new generation, written in rust. SSH under WSS with some customization.☆135Jan 24, 2026Updated 8 months ago
- ☆40Nov 25, 2025Updated 10 months ago
- 🧠 The ultimate resource for finding Beacon Object Files (BOFs).☆161Updated this week
- General Purpose OpSec Server☆115Mar 13, 2026Updated 6 months ago
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 6 months ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆328Sep 27, 2026Updated last week
- Shellcode injection using the Windows Debugging API☆180Jan 4, 2026Updated 9 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- Adversary Emulation Framework☆132Jul 1, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆193Oct 21, 2025Updated 11 months ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆145Jan 29, 2026Updated 8 months ago
- .NET CLR-Stomping☆146May 20, 2026Updated 4 months ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆73Updated this week
- sigreturn-oriented(SROP) based sleep obfuscation poc for Linux☆69Dec 15, 2025Updated 9 months ago
- A sleepmask based on Ekko that preserves unwind data at sleep time.☆56Mar 30, 2026Updated 6 months ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆102Apr 30, 2026Updated 5 months ago
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆97Feb 6, 2026Updated 8 months ago
- A Native Bash Framework for Kerberos Ticket Extraction on Linux 🔐☆48Feb 23, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆121Jan 4, 2026Updated 9 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆182Apr 14, 2026Updated 5 months ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆69Apr 2, 2025Updated last year
- Yet another zip smuggler☆34Jul 16, 2025Updated last year
- A tool for coercing and relaying Kerberos authentication over DCOM and RPC.☆154Jul 17, 2025Updated last year
- bring your own clean ntdll (or other MS dlls)☆28Jul 14, 2025Updated last year
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆67Jul 12, 2026Updated 2 months ago
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 8 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆154Nov 12, 2025Updated 10 months ago
- SilentChrome-BOF is a BOF (Beacon Object File) that silently installs a browser extension into Chrome or Edge by modifying the Preference…☆29Apr 3, 2026Updated 6 months ago
- A python script that automates a C2 Profile build☆49Jul 21, 2026Updated 2 months ago
- A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfaci…☆223Sep 21, 2026Updated 2 weeks ago
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 8 months ago
- BOF for extracting Edge credentials from the main browser process.☆51May 5, 2026Updated 5 months ago
- Monitoring tool to detect patterns or IOCs (strings, regex, VirusTotal) and alert you and your team via console, Telegram or SMS written …☆17Feb 17, 2026Updated 7 months ago