Alternatives and similar repositories for REW-sploit:

Users that are interested in REW-sploit are comparing it to the libraries listed below

• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆128Updated last year
• pucarasec / zuthaka
  Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…
  ☆175Updated 2 years ago
• airbus-cert / Invoke-Bof
  Load any Beacon Object File using Powershell!
  ☆246Updated 3 years ago
• o1mate / AppLocker-Bypass
  Bypassing AppLocker with C#
  ☆137Updated 3 years ago
• byt3bl33d3r / pyMalleableC2
  Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.
  ☆271Updated 3 months ago
• nccgroup / pybeacon
  A collection of scripts for dealing with Cobalt Strike beacons in Python
  ☆168Updated 4 years ago
• thiagomayllart / Harvis
  Harvis is designed to automate your C2 Infrastructure.
  ☆104Updated 2 years ago
• NVISOsecurity / pyCobaltHound
  pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Blood…
  ☆136Updated last year
• CCob / SylantStrike
  Simple EDR implementation to demonstrate bypass
  ☆163Updated 4 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆133Updated 3 years ago
• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆231Updated 2 years ago
• xforcered / WFH
  ☆185Updated 2 years ago
• pwn1sher / WMEye
  WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
  ☆362Updated 3 years ago
• darmado / Atomic-Red-Team-C2
  ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabili…
  ☆171Updated 4 months ago
• CCob / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆263Updated 3 years ago
• RedSiege / PersistAssist
  Fully modular persistence framework
  ☆249Updated last year
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆226Updated 2 years ago
• 3xpl01tc0d3r / Callidus
  ☆162Updated 2 years ago
• klezVirus / CandyPotato
  Pure C++, weaponized, fully automated implementation of RottenPotatoNG
  ☆300Updated 3 years ago
• sec-consult / aggrokatz
  Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it …
  ☆156Updated 3 years ago
• bats3c / EvtMute
  Apply a filter to the events being reported by windows event logging
  ☆260Updated 3 years ago
• Cerbersec / DomainBorrowingC2
  ☆165Updated 3 years ago
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆205Updated 3 years ago
• subat0mik / whoamsi
  An effort to track security vendors' use of Microsoft's Antimalware Scan Interface
  ☆238Updated 2 years ago
• Mr-Un1k0d3r / DLLsForHackers
  Dll that can be used for side loading and other attack vector.
  ☆201Updated 4 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆255Updated 2 years ago
• STMCyber / boobsnail
  BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.
  ☆256Updated 3 years ago
• RiccardoAncarani / LiquidSnake
  LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
  ☆328Updated 3 years ago
• Wh04m1001 / SysmonEoP
  ☆182Updated 2 years ago
• Sq00ky / SMB-Session-Spoofing
  ☆120Updated last year