C2 Infrastructure Automation
☆122Jun 21, 2025Updated last year
Alternatives and similar repositories for C2_INFRA_WORKSHOP_DEFCON32_RED_TEAM_VILLAGE
Users that are interested in C2_INFRA_WORKSHOP_DEFCON32_RED_TEAM_VILLAGE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reflective shellcode runners using obfuscated Win32 APIs in C# and C++ (GetProcAddress & GetModuleHandle). For penetration testing.☆16Jul 17, 2025Updated last year
- Cobalt Strike notifications via NTFY.☆16Sep 24, 2024Updated 2 years ago
- ApexLdr is a DLL Payload Loader written in C☆117Jul 17, 2024Updated 2 years ago
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆332May 17, 2024Updated 2 years ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆41May 31, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆285Jun 8, 2023Updated 3 years ago
- CipherRun is an ethical hacking tool used to execute shellcode easily while bypassing antivirus solutions.☆13Jan 30, 2024Updated 2 years ago
- Panoptes Endpoint Detection and Response Solution☆46Mar 7, 2026Updated 8 months ago
- Evasive shellcode loader☆401Oct 17, 2024Updated 2 years ago
- Tools for analyzing EDR agents☆280Jun 10, 2024Updated 2 years ago
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆206Jun 23, 2023Updated 3 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- ☆143Nov 17, 2025Updated 11 months ago
- Slides & Code snippets for a workshop held @ x33fcon 2024☆285Jun 15, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆194Nov 27, 2024Updated last year
- Various AD tools needed for penetration testing in one place.☆25Jul 13, 2023Updated 3 years ago
- Port of Cobalt Strike's Process Inject Kit☆195Dec 1, 2024Updated last year
- Open Source C&C Specification☆287Feb 28, 2025Updated last year
- ☆43Feb 18, 2025Updated last year
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆326Apr 12, 2024Updated 2 years ago
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆107Jan 10, 2026Updated 10 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆249Apr 11, 2026Updated 6 months ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆817Jan 26, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆26Nov 8, 2024Updated 2 years ago
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆152Aug 15, 2024Updated 2 years ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- Threadless shellcode injection tool☆68Aug 5, 2024Updated 2 years ago
- A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…☆600Jun 12, 2024Updated 2 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆218Feb 6, 2025Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.☆462Dec 21, 2023Updated 2 years ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆192Apr 14, 2024Updated 2 years ago
- Hide shellcode by shuffling bytes into a random array and reconstruct at runtime☆207Mar 26, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.☆442Jul 8, 2024Updated 2 years ago
- ☆109Oct 29, 2024Updated 2 years ago
- Collection of random RedTeam scripts.☆213Mar 8, 2024Updated 2 years ago
- Payload Generation Workflow☆41Jul 18, 2025Updated last year
- C# DInvoke Shellcode Runner☆31Feb 10, 2025Updated last year
- Hide your P/Invoke signatures through other people's signed assemblies☆216Mar 10, 2024Updated 2 years ago
- Reflective DLL Injection Made Bella☆248Jan 6, 2025Updated last year
Are these results useful?