Mythic C2 agent targeting Linux and Windows hosts written in Rust
☆411Oct 11, 2026Updated last week
Alternatives and similar repositories for thanatos
Users that are interested in thanatos are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆227Oct 2, 2026Updated 2 weeks ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆238Mar 23, 2023Updated 3 years ago
- A rust library that allows you to host the CLR and execute dotnet binaries.☆236Mar 12, 2025Updated last year
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,424Oct 27, 2023Updated 2 years ago
- A .NET Framework 4.0 Windows Agent☆563Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Remote operations commands implemented using Beacon Object Files☆1,195Sep 24, 2026Updated 3 weeks ago
- A cross platform C2/post-exploitation framework.☆720Updated this week
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆368Mar 2, 2024Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,033Jun 4, 2024Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆1,439Nov 22, 2023Updated 2 years ago
- A light-weight first-stage C2 implant written in Nim (and Rust).☆956Mar 2, 2026Updated 7 months ago
- Dynamically invoke arbitrary unmanaged code☆370Jul 1, 2026Updated 3 months ago
- KaynLdr is a Reflective Loader written in C/ASM☆549Dec 3, 2023Updated 2 years ago
- Nameless C2 - A C2 with all its components written in Rust☆283Sep 26, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- COFF and BOF Loader written in Nim☆178Apr 4, 2026Updated 6 months ago
- A work in progress BOF/COFF loader in Rust☆51Mar 22, 2023Updated 3 years ago
- Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.☆638Oct 11, 2026Updated last week
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆1,169Mar 31, 2021Updated 5 years ago
- Rusty Impersonate☆107Oct 15, 2025Updated last year
- Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence☆67Jun 23, 2025Updated last year
- Inject .NET assemblies into an existing process☆510Jan 19, 2022Updated 4 years ago
- Apply a divide and conquer approach to bypass EDRs☆288Oct 19, 2023Updated 2 years ago
- link is a command and control framework written in rust☆579Aug 18, 2021Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A rust based DLL injection project☆29Sep 18, 2022Updated 4 years ago
- Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation☆993Oct 7, 2022Updated 4 years ago
- A collaborative, multi-platform, red teaming framework☆4,837Oct 11, 2026Updated last week
- CobaltStrike beacon in rust☆210Aug 10, 2024Updated 2 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆713Sep 9, 2026Updated last month
- FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads☆381Apr 16, 2022Updated 4 years ago
- Call stack spoofing for Rust☆385Feb 7, 2025Updated last year
- A shellcode function to encrypt a running process image when sleeping.☆337Sep 11, 2021Updated 5 years ago
- Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.☆284Feb 8, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Threadless Process Injection using remote function hooking.☆822Sep 4, 2024Updated 2 years ago
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆167Oct 31, 2024Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆675Dec 23, 2022Updated 3 years ago
- A modern 32/64-bit position independent implant template☆1,375Jun 1, 2026Updated 4 months ago
- Various Cobalt Strike BOFs☆788Oct 16, 2022Updated 4 years ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆244Feb 12, 2025Updated last year
- Nim-based assembly packer and shellcode loader for opsec & profit☆486Feb 24, 2023Updated 3 years ago