Alternatives and similar repositories for vermilion

Users that are interested in vermilion are comparing it to the libraries listed below

• EvilBytecode / Lifetime-Amsi-EtwPatch

  View on GitHub
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆103Apr 27, 2025Updated 9 months ago
• furax124 / Protect_Loader

  View on GitHub
  A fucking real shellcode loader with a GUI. Work-in-Progress.
  ☆82Jun 25, 2025Updated 7 months ago
• R3DRUN3 / sploitcraft

  View on GitHub
  🏴‍☠️ Hacking Guides, Demos and Proof-of-Concepts 🥷
  ☆219Sep 4, 2025Updated 5 months ago
• ab2pentest / MacOSThreatTrack

  View on GitHub
  Bash tool used for proactive detection of malicious activity on macOS systems.
  ☆39Sep 29, 2025Updated 4 months ago
• NtDallas / Svartalfheim

  View on GitHub
  Stage 0
  ☆169Dec 18, 2024Updated last year
• federella / CVE-2023-41717

  View on GitHub
  This repository is to provide a write-up and PoC for CVE-2023-41717.
  ☆12Aug 31, 2023Updated 2 years ago
• scs-labrat / NufSedC2

  View on GitHub
  ☆12Dec 15, 2024Updated last year
• dmcxblue / PyObscura

  View on GitHub
  A python script that automates a C2 Profile build
  ☆48Dec 14, 2025Updated 2 months ago
• doyensec / malicious-devfile-registry

  View on GitHub
  Exploit for CVE-2024-0402 in Gitlab
  ☆15Mar 18, 2025Updated 10 months ago
• lawndoc / Respotter

  View on GitHub
  Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.
  ☆197Nov 5, 2025Updated 3 months ago
• almounah / superdeye

  View on GitHub
  Indirect Syscall with TartarusGate Approach in Go
  ☆134Jul 8, 2025Updated 7 months ago
• hkl1x / Bypass_AV

  View on GitHub
  免杀木马样本
  ☆102Oct 11, 2025Updated 4 months ago
• offalltn / gitC2

  View on GitHub
  POC of GITHUB simple C2 in rust
  ☆52Jul 27, 2025Updated 6 months ago
• ricardojoserf / NativeTokenImpersonate

  View on GitHub
  Impersonate Tokens using only NTAPI functions
  ☆83Apr 4, 2025Updated 10 months ago
• kozmer / silentpulse

  View on GitHub
  single-threaded event driven sleep obfuscation poc for linux
  ☆37Jun 14, 2025Updated 8 months ago
• R3DRUN3 / magnet

  View on GitHub
  Purple-team telemetry & simulation toolkit.
  ☆107Dec 16, 2025Updated last month
• zh1tro / chaosDump

  View on GitHub
  A powerful and clean bash script to dump and extract information from Project Discovery's Chaos Project https://chaos.projectdiscovery.io…
  ☆25Mar 31, 2022Updated 3 years ago
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit

  View on GitHub
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆200Nov 12, 2024Updated last year
• strozfriedberg / DUALITY

  View on GitHub
  ☆18Feb 29, 2024Updated last year
• aaaalmassri / Network_Hacking_Scripts

  View on GitHub
  Python Prototype Scripts to Exploit or Discover Network vulnerabilities and misconfiguration.
  ☆19Apr 6, 2024Updated last year
• vxCrypt0r / AMSI_VEH

  View on GitHub
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆167May 30, 2024Updated last year
• CosasDePuma / Hackpack

  View on GitHub
  🎒 An up-to-date collection of precompiled binaries and hacking scripts.
  ☆47Feb 1, 2026Updated 2 weeks ago
• t3l3machus / ACEshark

  View on GitHub
  ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminatin…
  ☆121Jan 15, 2025Updated last year
• Teach2Breach / schtask

  View on GitHub
  Rust implementation, creating a scheduled task programmatically with user logon trigger.
  ☆47Jun 10, 2025Updated 8 months ago
• boku7 / patchwerk

  View on GitHub
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆195Feb 6, 2025Updated last year
• ricardojoserf / NativeBypassCredGuard

  View on GitHub
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆266Apr 8, 2025Updated 10 months ago
• 0xthirteen / Carseat

  View on GitHub
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆270Nov 12, 2024Updated last year
• c2pain / RustBird

  View on GitHub
  Early Bird APC Injection in Rust
  ☆63Oct 9, 2024Updated last year
• BlackSnufkin / NyxInvoke

  View on GitHub
  NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…
  ☆231Feb 12, 2025Updated last year
• Slowerzs / KeyJumper

  View on GitHub
  ☆53Mar 26, 2025Updated 10 months ago
• D3Ext / go-recon

  View on GitHub
  External recon toolkit
  ☆54Dec 29, 2024Updated last year
• magisterquis / curlrevshell

  View on GitHub
  Kooky cURL-powered replacement for reverse shell via /dev/tcp
  ☆77Jan 24, 2026Updated 3 weeks ago
• passthehashbrowns / VectoredExceptionHandling

  View on GitHub
  ☆106Aug 21, 2024Updated last year
• MWR-CyberSec / AD-CS-Forest-Exploiter

  View on GitHub
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆125Dec 2, 2023Updated 2 years ago
• amjcyber / pwnlook

  View on GitHub
  An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…
  ☆166Oct 9, 2024Updated last year
• dmcxblue / AzureFunctionRedirector

  View on GitHub
  ☆50Apr 9, 2025Updated 10 months ago
• jfjallid / go-secdump

  View on GitHub
  Tool to remotely dump secrets from the Windows registry
  ☆522Nov 18, 2025Updated 2 months ago
• tehstoni / tryharder

  View on GitHub
  C++ Staged Shellcode Loader with Evasion capabilities.
  ☆97Oct 7, 2024Updated last year
• efeali / fragtunnel

  View on GitHub
  Fragtunnel is a proof-of-concept (PoC) TCP tunnel tool that you can use to tunnel your application's traffic and bypass next-generation f…
  ☆220Jun 4, 2024Updated last year