Hunt for C2 servers and phishing web sites using VirusTotal API , you can modify code to kill the malicious process
☆74May 19, 2024Updated 2 years ago
Alternatives and similar repositories for IP-Hunter
Users that are interested in IP-Hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PoC .NET-specific process injection tool☆58Mar 17, 2024Updated 2 years ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆40Nov 16, 2023Updated 2 years ago
- A simple commandline application to automatically decrypt strings from Obfuscator protected binaries☆48Jun 15, 2024Updated 2 years ago
- malware written for educational purposes☆72Dec 31, 2025Updated 7 months ago
- An interactive TUI tool to create Brute Ratel C4 profiles based on BURP browsing data.☆32May 23, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated last year
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 6 months ago
- Local & remote Windows DLL Proxying☆172Jun 17, 2024Updated 2 years ago
- Automated .NET AppDomain hijack payload generation☆129Feb 4, 2025Updated last year
- IAT Unhooking proof-of-concept☆33Apr 7, 2024Updated 2 years ago
- Generic PE loader for fast prototyping evasion techniques☆248Jul 2, 2024Updated 2 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆36Oct 31, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- URLFUZZ By T00ls.Net☆23Jul 4, 2023Updated 3 years ago
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆326Apr 12, 2024Updated 2 years ago
- MacInjector is a tool that lists macOS applications, checks code-signing vulnerabilities, and injects a dynamic library (dylib) into a vu…☆18Oct 8, 2025Updated 10 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆286Sep 18, 2024Updated last year
- The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.☆28Mar 9, 2024Updated 2 years ago
- ☆151Mar 22, 2024Updated 2 years ago
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆541Nov 14, 2025Updated 8 months ago
- ☆20Nov 28, 2024Updated last year
- AI modular structure that provides automation-based attack and penetration☆14May 10, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A technique of hiding malicious shellcode via Shannon encoding.☆270Oct 23, 2022Updated 3 years ago
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆151Aug 15, 2024Updated last year
- Run PowerShell command without invoking powershell.exe☆36Nov 22, 2021Updated 4 years ago
- ApexLdr is a DLL Payload Loader written in C☆117Jul 17, 2024Updated 2 years ago
- A C++ PoC implementation for enumerating Windows Fibers directly from memory☆22May 11, 2024Updated 2 years ago
- SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections a…☆62May 23, 2022Updated 4 years ago
- Various one-off pentesting projects written in Nim. Updates happen on a whim.☆159May 25, 2026Updated 2 months ago
- gRPC client for the Merlin Server☆28Apr 17, 2025Updated last year
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆193Mar 4, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆125May 29, 2024Updated 2 years ago
- Research into WinSxS binaries and finding hijackable paths☆31Jul 30, 2026Updated 2 weeks ago
- XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.☆126May 22, 2025Updated last year
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆121May 2, 2024Updated 2 years ago
- Windows Service with the implementation of the Process hollowing technique to run shellcode☆13Jul 20, 2023Updated 3 years ago
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆314Dec 9, 2023Updated 2 years ago
- Lateral Movement via the .NET Profiler☆101Nov 21, 2024Updated last year