A set of tools and resources for analysis of Havoc C2
☆30Feb 27, 2024Updated 2 years ago
Alternatives and similar repositories for HavocC2-Forensics
Users that are interested in HavocC2-Forensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of tools and detections for the Sliver C2 Frameworj☆137Apr 24, 2023Updated 3 years ago
- AI modular structure that provides automation-based attack and penetration☆14May 10, 2024Updated 2 years ago
- Windows/Linux LSA credential extractor for lsass.dmp minidumps. Targets Windows 11 24H2/25H2/26H1 and Windows Server 2025. Pure Win32, no…☆41May 14, 2026Updated 4 months ago
- CorvusMiner Plugin for Overlord rat☆16Aug 9, 2026Updated last month
- Binary template for ReFS and LogFile for 010 Editor that parses, and decodes the internal structures of ReFS metadata and log records☆16Apr 1, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Tools and Binaries to use with KAPE☆13Aug 13, 2019Updated 7 years ago
- ☆11Feb 19, 2023Updated 3 years ago
- Run shellcode via EnumDesktopsA. C++ implementation☆13Jun 27, 2022Updated 4 years ago
- Tools for Incident Response and Malware Analysis☆11Feb 9, 2025Updated last year
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆81Sep 16, 2026Updated last week
- A python tool to parse and describe the SDDL string.☆17Jan 5, 2026Updated 8 months ago
- This module exploits a vulnerability in WinRAR (CVE-2023-38831). When a user opens a crafted RAR file and its embedded document, a script…☆17Sep 8, 2023Updated 3 years ago
- Vectored Exception Handling Squared☆33Dec 27, 2025Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple tool to fix corrupted png images by bruteforcing possible image dimensions in the IHDR chunk.☆20Oct 6, 2023Updated 2 years ago
- A python tool to generate an Excel file linking the list of cracked accounts and their LDAP attributes.☆12Jan 31, 2025Updated last year
- Lab Work☆83Jun 29, 2026Updated 2 months ago
- A scanner for the FortiNet vulnerability CVE-2025-64446☆32Nov 18, 2025Updated 10 months ago
- Network Forensics Workshop Files☆17Apr 21, 2015Updated 11 years ago
- Triage automation tool☆23Aug 19, 2026Updated last month
- A self-hosted Armory implementation.☆26Aug 12, 2026Updated last month
- MicroVM is a self-guided path for learning how computers work by building a tiny virtual machine.☆25Aug 27, 2026Updated last month
- A C# tool for extracting information from SCCM PXE boot media.☆56May 21, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- VTC - Velociraptor Timeline Creator☆19May 15, 2024Updated 2 years ago
- Volatility plugin to deal with windows kerberos security provider, list, carve and dump Tickets☆28Jan 21, 2026Updated 8 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 5 months ago
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆26Apr 11, 2026Updated 5 months ago
- A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN☆183Jan 26, 2026Updated 8 months ago
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆63Jul 20, 2026Updated 2 months ago
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆49Aug 13, 2025Updated last year
- repository contains main files and sources of the tool☆19Jul 20, 2025Updated last year
- Process Hollowing in Rust with Process Executable Relocation Support for both 32 and 64 bit architecture environments.☆26Jan 6, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ioc2rpz webgui☆17Aug 30, 2026Updated 3 weeks ago
- Pentester's toolbox☆12May 1, 2026Updated 4 months ago
- Windows Minidump loader for Ghidra☆28Sep 30, 2022Updated 3 years ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆65Jun 15, 2026Updated 3 months ago
- Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11☆87Jan 26, 2026Updated 8 months ago
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- ☆13Nov 24, 2019Updated 6 years ago