☆19Oct 1, 2025Updated last year
Alternatives and similar repositories for APT35-IOCs
Users that are interested in APT35-IOCs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 3 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated last month
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A live, browser-based threat intelligence dashboard aggregating 68 curated sources across government advisories, news, research, vendor b…☆16Updated this week
- ⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX…☆22Dec 23, 2025Updated 10 months ago
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 6 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 7 months ago
- AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…☆93Aug 3, 2025Updated last year
- A PoC Cobalt Strike UDRL written in Rust☆34Sep 12, 2026Updated last month
- ☆28Jun 29, 2026Updated 4 months ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Oct 14, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- C# to read WIM files over the network without transferring the whole file☆40Jan 22, 2026Updated 9 months ago
- Offensive toolage collection for the Windows environment.☆28Dec 4, 2025Updated 10 months ago
- A proof-of-concept shellcode loader that leverages AI/ML face recognition models to verify the identity of a user on a target system☆47Oct 30, 2024Updated 2 years ago
- BinjaryNinja plugin for a ShellStorm like assembly/disassembly experience☆16Jul 28, 2026Updated 3 months ago
- Detection for CVE-2025-10035☆19Oct 14, 2025Updated last year
- ☆91Sep 3, 2026Updated last month
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 7 months ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ThreatCheck - Select any indicator of compromise on any web page - or highlight an entire paragraph from a threat report - and instantly …☆35May 6, 2026Updated 5 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 4 months ago
- ☆51Aug 6, 2020Updated 6 years ago
- Use of in-memory string scans to outsmart reverse engineers☆20Nov 20, 2024Updated last year
- ☆22Jun 24, 2025Updated last year
- A synergized Visual Studio and Rust development environment☆18Jan 25, 2025Updated last year
- A request smuggling desync to global cache channel PoC to accompany paper on blog.malicious.group.☆15Jul 25, 2025Updated last year
- ☆72Jul 12, 2026Updated 3 months ago
- This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by …☆28Jul 15, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆26Apr 11, 2026Updated 6 months ago
- Intel 64/Windows low-level experiments☆117Sep 16, 2026Updated last month
- Set of PoC to abuse Windows minifilters functionality☆111May 1, 2026Updated 5 months ago
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆50Aug 13, 2025Updated last year
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Oct 16, 2026Updated 2 weeks ago