Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic
☆210Jul 30, 2026Updated last month
Alternatives and similar repositories for Medusa
Users that are interested in Medusa are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆22Dec 30, 2025Updated 8 months ago
- ☆22Jun 9, 2025Updated last year
- A Visual Studio Code Extension agent for Mythic C2☆76Nov 5, 2024Updated last year
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆196Jul 9, 2021Updated 5 years ago
- A .NET Framework 4.0 Windows Agent☆554Aug 11, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PoC executing shellcode in Dart☆15Jun 28, 2022Updated 4 years ago
- Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation☆998Oct 7, 2022Updated 3 years ago
- Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly☆89Sep 30, 2024Updated last year
- Collection of beacon BOF written to learn windows and cobaltstrike☆362Feb 24, 2023Updated 3 years ago
- Mythic C2 agent targeting Linux and Windows hosts written in Rust☆409Nov 26, 2025Updated 9 months ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆349Sep 1, 2021Updated 5 years ago
- A cross-platform implant written in Nim☆176Mar 6, 2024Updated 2 years ago
- Template repo for hooking 3rd party agents into Mythic while hosting them on external GitHub Repos☆59Nov 18, 2024Updated last year
- Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.☆290Jun 8, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …☆743Aug 18, 2023Updated 3 years ago
- Payload designed for targeting Jamf enrolled devices.☆41May 19, 2023Updated 3 years ago
- A tool to sync mythic events with ghostwriter oplog.☆15Nov 21, 2024Updated last year
- Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…☆887Mar 29, 2021Updated 5 years ago
- ☆24Jul 30, 2026Updated last month
- Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…☆465Mar 8, 2023Updated 3 years ago
- SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.☆1,223Apr 16, 2025Updated last year
- Inject .NET assemblies into an existing process☆509Jan 19, 2022Updated 4 years ago
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,785Jan 16, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collaborative, multi-platform, red teaming framework☆4,749Updated this week
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆118Sep 30, 2024Updated last year
- Hide your payload in DNS☆623May 3, 2023Updated 3 years ago
- A C2 post-exploitation framework☆486Jan 24, 2024Updated 2 years ago
- Nim version of MDSec's Parallel Syscall PoC☆123Apr 4, 2026Updated 5 months ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 4 years ago
- ☆537Nov 20, 2021Updated 4 years ago
- Webshell agent in aspx and php☆28Dec 11, 2025Updated 8 months ago
- PIC lsass dumper using cloned handles☆598Oct 18, 2022Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆389Jul 30, 2024Updated 2 years ago
- Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers t…☆460Oct 25, 2021Updated 4 years ago
- COFF and BOF Loader written in Nim☆177Apr 4, 2026Updated 5 months ago
- ☆120Jun 17, 2022Updated 4 years ago
- Proof-of-concept obfuscation toolkit for C# post-exploitation tools☆434Jul 22, 2022Updated 4 years ago
- Using outlook COM objects to create convincing phishing emails without the user noticing. This project is meant for internal phishing.☆157Dec 22, 2020Updated 5 years ago
- Koppeling x Metatwin x LazySign☆219Aug 26, 2021Updated 5 years ago