Alternatives and similar repositories for merlin

Users that are interested in merlin are comparing it to the libraries listed below

• brosck / Reaper
  「💀」Proof of concept on BYOVD attack
  ☆161Updated 6 months ago
• HavocFramework / Talon
  (Demo) 3rd party agent for Havoc
  ☆139Updated last year
• BeetleChunks / Obligato
  This project is an implant framework designed for long term persistent access to Windows machines.
  ☆110Updated last year
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆146Updated last year
• cybersectroll / TrollAMSI
  ☆178Updated last week
• Peco602 / cobaltstrike-aggressor-scripts
  A collection of Cobalt Strike Aggressor scripts.
  ☆98Updated 3 years ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆201Updated last year
• MythicAgents / Athena
  ☆201Updated last month
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆152Updated last year
• nettitude / Aladdin
  ☆221Updated last year
• nettitude / Tartarus-TpAllocInject
  ☆186Updated last year
• Ghost53574 / havoc_profile_generator
  Havoc C2 profile generator
  ☆90Updated 8 months ago
• Tylous / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆116Updated 2 years ago
• icyguider / LatLoader
  PoC module to demonstrate automated lateral movement with the Havoc C2 framework.
  ☆303Updated last year
• Primusinterp / PrimusC2
  A C2 framework built for my bachelors thesis
  ☆55Updated 7 months ago
• trevorsaudi / Mshikaki
  A shellcode injection tool showcasing various process injection techniques
  ☆137Updated last year
• NUL0x4C / NoRunPI
  Run Your Payload Without Running Your Payload
  ☆182Updated 2 years ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆167Updated 3 months ago
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆164Updated last year
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆140Updated last year
• CodeXTF2 / PyHmmm
  Simple PoC Python agent to showcase Havoc C2's custom agent interface. Not operationally safe or stable. Released with accompanying blog …
  ☆81Updated last year
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆131Updated 10 months ago
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆238Updated last year
• Tylous / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆185Updated 9 months ago
• smokeme / airstrike
  ☆167Updated 10 months ago
• Mr-Un1k0d3r / Cookie-and-Handle-Stealer
  C or BOF file to extract WebKit master key to decrypt user cookie
  ☆199Updated last year
• JrM2628 / httpworker
  A Flask-based HTTP(S) command and control (C2) framework with a web interface. Custom Windows EXE/DLL implants written in C++. For educat…
  ☆90Updated last year
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆256Updated 2 years ago
• ZERODETECTION / MSC_Dropper
  ☆177Updated 10 months ago
• 0xTriboulet / Revenant
  Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework
  ☆379Updated 10 months ago