IncludeSecurity / c2-vulnerabilities
PoCs of RCEs against open source C2 servers
☆82Updated 7 months ago
Alternatives and similar repositories for c2-vulnerabilities:
Users that are interested in c2-vulnerabilities are comparing it to the libraries listed below
- Create Anti-Copy DRM Malware☆55Updated 8 months ago
- ApexLdr is a DLL Payload Loader written in C☆108Updated 9 months ago
- Leverage WindowsApp createdump tool to obtain an lsass dump☆148Updated 7 months ago
- Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE☆194Updated 5 months ago
- Port of Cobalt Strike's Process Inject Kit☆173Updated 5 months ago
- To audit the security of read-only domain controllers☆115Updated last year
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆205Updated last year
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆136Updated last month
- A Tool that aims to evade av with binary padding☆148Updated 10 months ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆132Updated 6 months ago
- ☆224Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆187Updated 5 months ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆238Updated 10 months ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆81Updated 3 years ago
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆140Updated 3 months ago
- Windows Persistence IT-Security☆97Updated last month
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆204Updated last year
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆156Updated 2 weeks ago
- ☆66Updated 3 months ago
- CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit☆72Updated 7 months ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆108Updated 2 years ago
- ☆165Updated 9 months ago
- Ghosting-AMSI☆159Updated 2 weeks ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆152Updated last year
- A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)☆57Updated 2 years ago
- An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…☆135Updated 2 years ago
- TeamServer and Client of Exploration Command and Control Framework☆125Updated this week
- ☆154Updated 9 months ago
- A Mythic agent for Windows written in C☆120Updated 2 weeks ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆148Updated last year