ZoomBotC2 is a stealthy Command and Control (C2) framework that leverages Zoom's API endpoints for covert communication between implants and the operator. It uses legitimate Zoom messaging APIs to send commands and receive results, effectively blending in with regular Zoom traffic.
☆57Jun 30, 2025Updated last year
Alternatives and similar repositories for ZoomBotC2
Users that are interested in ZoomBotC2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆50Dec 5, 2025Updated 9 months ago
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆37Aug 31, 2025Updated last year
- A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆40Mar 6, 2025Updated last year
- A powerful, modular, lightweight and efficient command & control framework written in Nim.☆225Nov 3, 2025Updated 10 months ago
- Utilizng an MCP Server to communicate with your C2☆94May 15, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- converts sRDI compatible dlls to shellcode☆38Jan 20, 2025Updated last year
- Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.☆308Apr 6, 2025Updated last year
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆46Aug 5, 2025Updated last year
- A small How-To on creating your own weaponized WSL file☆128Jul 23, 2025Updated last year
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- Permanently disable EDRs as local admin☆130Dec 19, 2025Updated 9 months ago
- One-header configurable C++20 COFF loader☆20Jul 21, 2025Updated last year
- Implementation of self deletion for windows (with Win11 fix)☆17Jul 14, 2025Updated last year
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆28Jul 23, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- bring your own clean ntdll (or other MS dlls)☆28Jul 14, 2025Updated last year
- ☆151Nov 6, 2025Updated 10 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆214Nov 4, 2025Updated 10 months ago
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆154Apr 18, 2025Updated last year
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- A Mythic agent for Windows written in C☆181Aug 22, 2026Updated 3 weeks ago
- Blog/Journal on how to backdoor VSCode extensions☆80Feb 24, 2026Updated 6 months ago
- BYOVD hunter to help prioritize windows drivers worth manual analysis☆132Aug 19, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆22Jun 24, 2025Updated last year
- A reflective DLL development template for the Rust programming language☆122Nov 4, 2025Updated 10 months ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆74Nov 11, 2025Updated 10 months ago
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆45Jul 30, 2026Updated last month
- early cascade injection PoC based on Outflanks blog post, in rust☆63Nov 8, 2024Updated last year
- .NET tool used to enrich RPC telemetry☆101Jan 24, 2026Updated 7 months ago
- Local SYSTEM auth trigger for relaying - X☆160Jul 23, 2025Updated last year
- remote process injections using pool party techniques☆73Jun 29, 2025Updated last year
- Parses logs created by Cobalt Strike, Brute Ratel, OC2 and creates an SQLite DB which can be used to create custom reports.☆31Jul 4, 2026Updated 2 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆48Jan 25, 2025Updated last year
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆285Sep 18, 2024Updated 2 years ago
- Lateral Movement Bof with MSI ODBC Driver Install☆173Sep 30, 2025Updated 11 months ago
- A Payload Analysis Framework☆123Oct 9, 2025Updated 11 months ago
- Payload Generation Workflow☆41Jul 18, 2025Updated last year
- BOF to decrypt Signal Desktop chat logs☆68Feb 20, 2025Updated last year