Alternatives and similar repositories for AtlasC2:

Users that are interested in AtlasC2 are comparing it to the libraries listed below

• netero1010 / ScheduleRunner
  A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation
  ☆336Updated 3 months ago
• cube0x0 / MiniDump
  C# Lsass parser
  ☆291Updated 3 years ago
• m3rcer / Chisel-Strike
  A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
  ☆451Updated last year
• bugch3ck / SharpEfsPotato
  Local privilege escalation from SeImpersonatePrivilege using EfsRpc.
  ☆317Updated 2 years ago
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆298Updated 2 years ago
• YOLOP0wn / POSTDump
  ☆327Updated 2 months ago
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆483Updated 11 months ago
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆274Updated 2 years ago
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆302Updated last year
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆206Updated last week
• rasta-mouse / DInvoke
  Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.
  ☆158Updated last year
• RedSiege / PersistAssist
  Fully modular persistence framework
  ☆254Updated 2 years ago
• VirtualAlllocEx / Create-Thread-Shellcode-Fetcher
  This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and down…
  ☆246Updated last year
• boh / RedCsharp
  Collection of C# projects. Useful for pentesting and redteaming.
  ☆305Updated last year
• RikunjSindhwad / MSSQL-Attacker
  MSSQL Database Attacker tool
  ☆189Updated 2 years ago
• CCob / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆265Updated 4 years ago
• mertdas / RedPersist
  ☆215Updated last year
• Hagrid29 / DuplicateDump
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆200Updated 3 years ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆288Updated 3 years ago
• Flangvik / DLLSideloader
  PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading
  ☆125Updated 5 years ago
• MzHmO / psexec_noinstall
  Repository contains psexec, which will help to exploit the forgotten pipe
  ☆169Updated 5 months ago
• winsecurity / Offensive-C-Sharp
  ☆165Updated 2 years ago
• netero1010 / RDPHijack-BOF
  Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.
  ☆298Updated 2 years ago
• plackyhacker / SandboxDefender
  C# code to Sandbox Defender (and most probably other AV/EDRs).
  ☆164Updated 3 years ago
• CodeXTF2 / cobaltstrike-headless
  Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.
  ☆149Updated 2 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago
• aniqfakhrul / Sharperner
  Simple executable generator with encrypted shellcode.
  ☆282Updated 2 years ago
• adamsvoboda / nim-loader
  WIP shellcode loader in nim with EDR evasion techniques
  ☆212Updated 3 years ago
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆145Updated last year
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆129Updated last year