Karkas66 / CelestialSpark
Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust
☆103Updated 3 weeks ago
Alternatives and similar repositories for CelestialSpark:
Users that are interested in CelestialSpark are comparing it to the libraries listed below
- Two in one, patch lifetime powershell console, no more etw and amsi!☆88Updated this week
- Construct the payload at runtime using an array of offsets☆63Updated 10 months ago
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆92Updated this week
- Example code samples from our ScriptBlock Smuggling Blog post☆89Updated 10 months ago
- Situational Awareness script to identify how and where to run implants☆50Updated 4 months ago
- ☆154Updated 4 months ago
- Adversary Emulation Framework☆98Updated 9 months ago
- ☆106Updated 2 months ago
- .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS☆140Updated 2 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆120Updated 6 months ago
- Stage 0☆156Updated 4 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆74Updated last month
- Lifetime AMSI bypass.☆35Updated 9 months ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆40Updated 10 months ago
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆141Updated 9 months ago
- ☆153Updated 8 months ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Updated last year
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆113Updated 11 months ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆155Updated last month
- Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects☆92Updated 2 weeks ago
- A python script that automates a C2 Profile build☆40Updated 3 weeks ago
- ☆54Updated 6 months ago
- ☆125Updated 7 months ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated last year
- Lateral Movement☆122Updated last year
- ☆110Updated 5 months ago
- ForsHops☆98Updated last month
- Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.☆111Updated 4 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆48Updated 11 months ago