Fast Windows post-exploitation wins after initial access.
☆29Jan 28, 2026Updated 6 months ago
Alternatives and similar repositories for AfterShell
Users that are interested in AfterShell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GitHub Workflows Insights☆47Jun 27, 2026Updated last month
- Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.☆20Jan 22, 2026Updated 6 months ago
- SACL Scanner is a tool designed to scan and analyze SACLs.☆52Feb 13, 2025Updated last year
- self-hosted Azure OSINT tool☆35Jun 24, 2025Updated last year
- ☆30Jul 26, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. Implemented in C#, C++, Crystal, P…☆154Feb 17, 2026Updated 5 months ago
- A TUI for Active Directory collection.☆173Mar 17, 2026Updated 4 months ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆25Jul 5, 2023Updated 3 years ago
- ☆16Jan 9, 2025Updated last year
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆114Apr 16, 2026Updated 3 months ago
- ☆57Jun 28, 2025Updated last year
- ☆28Mar 14, 2026Updated 4 months ago
- Parser and reconciliation tooling for large Active Directory environments.☆33Feb 18, 2025Updated last year
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated last month
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall☆138Dec 17, 2025Updated 7 months ago
- One WSL BOF to rule them all☆189Jan 14, 2026Updated 6 months ago
- a small script to collect information from a management point☆37Jan 19, 2026Updated 6 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆91Oct 20, 2025Updated 9 months ago
- adws enumeration bof☆174Feb 16, 2026Updated 5 months ago
- Click Once + App Domain☆69Feb 23, 2026Updated 5 months ago
- Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust☆95Mar 7, 2026Updated 5 months ago
- OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…☆13Oct 27, 2024Updated last year
- Demo code JavaScript POC that tricks user into sending Windows hash to responder☆37Dec 12, 2025Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A rust proof of concept to demonstrate registry overwriting via RegRestoreKey using the Offline Registry Library☆24Nov 13, 2025Updated 8 months ago
- A C and Go /proc/pid/maps cloak of invisibilty for shared object files☆23Nov 19, 2025Updated 8 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆69Jan 5, 2026Updated 7 months ago
- Python script to leverage MSFT_MTProcess WMI class☆40Sep 17, 2025Updated 10 months ago
- Network scanning tool designed to detect and report changes in open ports and services over time☆13Oct 16, 2025Updated 9 months ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆47Jul 30, 2026Updated last week
- ☆24Feb 1, 2025Updated last year
- EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.☆195May 23, 2026Updated 2 months ago
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆165May 5, 2025Updated last year
- Microsoft Vulnerable Driver Block Lists in CSV and JSON for SIEM lookups☆55May 15, 2026Updated 2 months ago
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆220Jan 6, 2026Updated 7 months ago
- ☆100Sep 1, 2024Updated last year
- EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…☆160Feb 25, 2026Updated 5 months ago
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 8 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year