Alternatives and similar repositories for Titan

Users that are interested in Titan are comparing it to the libraries listed below

• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆36Updated 3 years ago
• outflanknl / nix_bof_template
  Beacon Object File (BOF) Template
  ☆51Updated 7 months ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆34Updated 3 years ago
• timwhitez / Bof2PIC
  BOF/COFF obj file to PIC(shellcode). by golang
  ☆39Updated 2 years ago
• evilashz / ProxyAPICall
  Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI
  ☆35Updated 2 years ago
• Hagrid29 / BOF-SprayAD
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆47Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆45Updated 2 years ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆45Updated 3 years ago
• BOFs / BOFs
  Beacon Object Files.
  ☆35Updated last year
• wolfcod / beacondbg
  Beacon Debugger
  ☆40Updated 7 months ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆46Updated 3 years ago
• ryanq47 / CS-EXTC2-ICMP
  An ICMP channel for Beacons, implemented using Cobalt Strike’s External C2 framework.
  ☆52Updated last week
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆100Updated 2 years ago
• BambiZombie / ThreadlessSpawn
  A Simple PoC
  ☆21Updated last year
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆43Updated 3 years ago
• th3k3ymak3r / minbeacon
  A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.
  ☆19Updated 3 years ago
• ProcessusT / HavocHub
  PoC for a Havoc agent/handler setup with all C2 traffic routed through GitHub. No direct connections: all commands and responses are rela…
  ☆24Updated last week
• Cobalt-Strike / callback_examples
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆33Updated 3 months ago
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆45Updated last year
• arsium / ShellCodeExec
  My personal shellcode loader
  ☆31Updated 2 years ago
• b1-team / phantom
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆16Updated last year
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆51Updated 2 years ago
• qwqdanchun / ScreenShot-BOF
  ☆42Updated last year
• timwhitez / Doge-Unhook
  DLL Unhooking
  ☆12Updated 4 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆43Updated 3 years ago
• JetP1ane / Artemis
  Artemis - C++ Hell's Gate Syscall Implementation
  ☆33Updated last year
• timwhitez / Doge-Whisper
  golang implementation of Syswhisper2/Syswhisper3
  ☆23Updated 3 years ago
• trainr3kt / MemReader_BoF
  ☆46Updated last year
• wilszdev / GetTrustedInstallerShell
  impersonate trustedinstaller by fiddling with tokens
  ☆17Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆102Updated 3 years ago