Utilities for obfuscating shellcode
☆108Mar 24, 2026Updated 6 months ago
Alternatives and similar repositories for Chromatophore
Users that are interested in Chromatophore are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hunting and injecting RWX 'mockingjay' DLLs in pure nim☆62Dec 11, 2024Updated last year
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆144Oct 4, 2026Updated last week
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆122May 2, 2024Updated 2 years ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- .NET CLR-Stomping☆148May 20, 2026Updated 4 months ago
- ☆113Feb 17, 2025Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆134Oct 4, 2024Updated 2 years ago
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆313Dec 9, 2023Updated 2 years ago
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆101Apr 9, 2026Updated 6 months ago
- .NET assembly loader with patchless AMSI and ETW bypass☆392Apr 19, 2023Updated 3 years ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆218Oct 19, 2024Updated last year
- A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.☆79Jun 6, 2024Updated 2 years ago
- Simple reverse ICMP shell☆15Apr 30, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Threadless shellcode injection tool☆68Aug 5, 2024Updated 2 years ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆23Oct 6, 2021Updated 5 years ago
- Sniffing files generator☆62Feb 24, 2025Updated last year
- A POC for developing BOFs for Sliver, Havoc, Cobalt Strike or most COFFLoaders in Rust.☆76Aug 24, 2025Updated last year
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Aug 13, 2024Updated 2 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆44Aug 6, 2024Updated 2 years ago
- Hide shellcode by shuffling bytes into a random array and reconstruct at runtime☆208Mar 26, 2025Updated last year
- Analyse your malware to surgically obfuscate it☆549Jun 27, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Mar 27, 2025Updated last year
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆548Jun 12, 2026Updated 4 months ago
- Tools for analyzing EDR agents☆280Jun 10, 2024Updated 2 years ago
- single-threaded event driven sleep obfuscation poc for linux☆49Jun 14, 2025Updated last year
- Lateral Movement Using DCOM and DLL Hijacking☆326Jun 18, 2023Updated 3 years ago
- adws enumeration bof☆174Sep 1, 2026Updated last month
- Hide your P/Invoke signatures through other people's signed assemblies☆215Mar 10, 2024Updated 2 years ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspectin…☆87Aug 9, 2026Updated 2 months ago
- psexecsvc - a python implementation of PSExec's native service implementation☆314Mar 24, 2026Updated 6 months ago
- Lifetime AMSI bypass☆692Sep 26, 2023Updated 3 years ago
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆175Jun 19, 2026Updated 3 months ago
- A work in progress BOF/COFF loader in Rust☆51Mar 22, 2023Updated 3 years ago
- ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.☆530Mar 7, 2026Updated 7 months ago
- A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass☆177Sep 22, 2025Updated last year