Red Team Initial Access Guide: Recon, exploitation, C2 setup, lateral movement, persistence, evasion techniques, and real-world case studies including network breaches and ransomware operations.
☆14Jun 8, 2025Updated last year
Alternatives and similar repositories for HELLCAT-Practical-Initial-Access-Guide-for-Red-Teams
Users that are interested in HELLCAT-Practical-Initial-Access-Guide-for-Red-Teams are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerShell port of GreenPlasma Admin -> System escalation☆12May 14, 2026Updated 5 months ago
- Wire and behavioural de-fingerprinting patches for impacket and NetExec☆21Nov 5, 2026Updated last week
- Red Teaming Tradecraft☆62Sep 28, 2022Updated 4 years ago
- ☆18Oct 3, 2026Updated last month
- Project Sato - C2☆10Apr 24, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆18Aug 8, 2024Updated 2 years ago
- ☆13Jan 15, 2026Updated 9 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- C# implementation of the process injection techniques dubbed "PoolParty"☆18Nov 7, 2025Updated last year
- Proof-of-concept demonstrating browser-native file encryption via the File System Access API. No software installation required - runs en…☆16Jul 28, 2026Updated 3 months ago
- This repo contains the materials, lab, and installation script for my Prompt Engineering with Local LLMs workshop.☆13Aug 17, 2026Updated 2 months ago
- Yet another zip smuggler☆35Jul 16, 2025Updated last year
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- RunPE implementation with multiple evasive techniques (2)☆16Sep 25, 2025Updated last year
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆172Sep 13, 2026Updated last month
- Capability extraction from Time Travel Debugging Traces☆17Aug 4, 2026Updated 3 months ago
- Orchestrate detonating redteam artifacts in VMs with different EDRs to see their detection surface.☆93Updated this week
- Fawkes is a golang Mythic C2 Agent exclusively written by AI.☆42Jul 21, 2026Updated 3 months ago
- ☆16Jan 15, 2026Updated 9 months ago
- ☆10Jul 29, 2026Updated 3 months ago
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- Mythic Agent to perform Breach & Attack Simulations☆35Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- SidePeek.js is a curated set of JavaScript payloads for browser-based recon. Run them in DevTools or as bookmarklets to uncover hidden AP…☆23May 13, 2025Updated last year
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆37Feb 25, 2026Updated 8 months ago
- Power Automate C2 (PAC2) : Stealth living-off-the-cloud C2 framework.☆39Apr 16, 2024Updated 2 years ago
- A Binary Ninja plugin that finds metadata in Rust binaries.☆14Aug 2, 2026Updated 3 months ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆56Aug 26, 2026Updated 2 months ago
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆28Jun 4, 2026Updated 5 months ago
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 9 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆41Oct 14, 2026Updated 3 weeks ago
- ☆14Apr 17, 2022Updated 4 years ago
- Tool to transplant a valid code signature from one Portable Executable (PE) binary to another.☆16Apr 24, 2020Updated 6 years ago
- Weaponized VSCode Extensions☆21May 7, 2026Updated 6 months ago
- Progressing on my malware development journey.☆17Aug 20, 2024Updated 2 years ago
- This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.☆11Jul 30, 2026Updated 3 months ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
Are these results useful?