A set of tools and resources for analysis of Havoc C2
☆30Feb 27, 2024Updated 2 years ago
Alternatives and similar repositories for HavocC2-Forensics
Users that are interested in HavocC2-Forensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of tools and detections for the Sliver C2 Frameworj☆137Apr 24, 2023Updated 3 years ago
- AI modular structure that provides automation-based attack and penetration☆14May 10, 2024Updated 2 years ago
- Binary template for ReFS and LogFile for 010 Editor that parses, and decodes the internal structures of ReFS metadata and log records☆16Apr 1, 2024Updated 2 years ago
- BlackMail is a tool for creating and sending spoof mail.☆38Nov 16, 2023Updated 2 years ago
- Tools for Incident Response and Malware Analysis☆11Feb 9, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Run shellcode via EnumDesktopsA. C++ implementation☆13Jun 27, 2022Updated 4 years ago
- Windows/Linux LSA credential extractor for lsass.dmp minidumps. Targets Windows 11 24H2/25H2/26H1 and Windows Server 2025. Pure Win32, no…☆42May 14, 2026Updated 5 months ago
- Malware dev tricks: parent PID spoofing. C++ implementation☆12Sep 7, 2022Updated 4 years ago
- CVE-2026-46242☆21Jul 4, 2026Updated 3 months ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆76May 13, 2026Updated 5 months ago
- CorvusMiner Plugin for Overlord rat☆16Aug 9, 2026Updated 2 months ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- APT techniques: Token theft via UpdateProcThreadAttribute. C++ implementation☆11Oct 29, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A python tool to generate an Excel file linking the list of cracked accounts and their LDAP attributes.☆12Jan 31, 2025Updated last year
- Lab Work☆83Jun 29, 2026Updated 3 months ago
- Vectored Exception Handling Squared☆34Dec 27, 2025Updated 9 months ago
- A python tool to parse and describe the SDDL string.☆18Jan 5, 2026Updated 9 months ago
- Malicious powershell scripts loader designed to avoid detection.☆63Jun 16, 2023Updated 3 years ago
- Triage automation tool☆23Sep 28, 2026Updated 3 weeks ago
- A scanner for the FortiNet vulnerability CVE-2025-64446☆34Nov 18, 2025Updated 11 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆47Aug 20, 2026Updated last month
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆98Feb 6, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MicroVM is a self-guided path for learning how computers work by building a tiny virtual machine.☆25Aug 27, 2026Updated last month
- A Python-based tool designed to capture IP addresses and NTLM authentication hashes from remote Windows clients using Telegram (lack of b…☆28Mar 31, 2025Updated last year
- Network Forensics Workshop Files☆17Apr 21, 2015Updated 11 years ago
- ☆38Sep 8, 2026Updated last month
- Pussy Financial's Ethereum Smart Contracts☆11Apr 28, 2022Updated 4 years ago
- A self-hosted Armory implementation.☆26Aug 12, 2026Updated 2 months ago
- Volatility plugin to deal with windows kerberos security provider, list, carve and dump Tickets☆27Jan 21, 2026Updated 8 months ago
- A C# tool for extracting information from SCCM PXE boot media.☆57May 21, 2026Updated 4 months ago
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An advanced fud crypter toolkit with AES-256 file encryption, decryption, and PDF exploit generation features.☆29Updated this week
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆26Apr 11, 2026Updated 6 months ago
- ioc2rpz webgui☆17Oct 11, 2026Updated last week
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 3 months ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆66Jun 15, 2026Updated 4 months ago