⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX files. Supports HTTP callbacks, SMB, and WebDAV for credential harvesting.
☆22Dec 23, 2025Updated 8 months ago
Alternatives and similar repositories for SheetStrike
Users that are interested in SheetStrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆25Jul 11, 2025Updated last year
- A Sliver C2 modification utility that enhances operational stealth by renaming protobuf definitions, regenerating protocol buffers, updat…☆25Oct 23, 2025Updated 10 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 5 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- C# to read WIM files over the network without transferring the whole file☆39Jan 22, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Chisel new generation, written in rust. SSH under WSS with some customization.☆135Jan 24, 2026Updated 7 months ago
- ☆40Nov 25, 2025Updated 9 months ago
- 🧠 The ultimate resource for finding Beacon Object Files (BOFs).☆159Updated this week
- General Purpose OpSec Server☆114Mar 13, 2026Updated 6 months ago
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 5 months ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆315Aug 22, 2026Updated 3 weeks ago
- Shellcode injection using the Windows Debugging API☆181Jan 4, 2026Updated 8 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 6 months ago
- Adversary Emulation Framework☆132Jul 1, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆193Oct 21, 2025Updated 10 months ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆146Jan 29, 2026Updated 7 months ago
- .NET CLR-Stomping☆146May 20, 2026Updated 3 months ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆73Mar 8, 2026Updated 6 months ago
- sigreturn-oriented(SROP) based sleep obfuscation poc for Linux☆68Dec 15, 2025Updated 9 months ago
- A sleepmask based on Ekko that preserves unwind data at sleep time.☆55Mar 30, 2026Updated 5 months ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆101Apr 30, 2026Updated 4 months ago
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆96Feb 6, 2026Updated 7 months ago
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆121Jan 4, 2026Updated 8 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A Native Bash Framework for Kerberos Ticket Extraction on Linux 🔐☆47Feb 23, 2026Updated 6 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆181Apr 14, 2026Updated 5 months ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆68Apr 2, 2025Updated last year
- Yet another zip smuggler☆34Jul 16, 2025Updated last year
- A tool for coercing and relaying Kerberos authentication over DCOM and RPC.☆151Jul 17, 2025Updated last year
- bring your own clean ntdll (or other MS dlls)☆28Jul 14, 2025Updated last year
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆62Jul 12, 2026Updated 2 months ago
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆153Nov 12, 2025Updated 10 months ago
- SilentChrome-BOF is a BOF (Beacon Object File) that silently installs a browser extension into Chrome or Edge by modifying the Preference…☆29Apr 3, 2026Updated 5 months ago
- A python script that automates a C2 Profile build☆49Jul 21, 2026Updated last month
- A QoL tool to obfuscate shellcode.☆28Jun 2, 2026Updated 3 months ago
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 7 months ago
- A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfaci…☆217Aug 6, 2026Updated last month
- BOF for extracting Edge credentials from the main browser process.☆50May 5, 2026Updated 4 months ago