Four-kit defense evasion suite for Sliver C2: Crystal Palace loader, sleep masking, in-memory PE execution, and remote process injection with PPID spoofing.
☆108Jul 21, 2026Updated 3 months ago
Alternatives and similar repositories for Sliver-Evasion-Suite
Users that are interested in Sliver-Evasion-Suite are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SVG Steganography toolkit☆17Jun 18, 2026Updated 4 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- ☆31Jul 24, 2026Updated 3 months ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆113Jul 26, 2026Updated 3 months ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆247Jul 8, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆29May 21, 2026Updated 5 months ago
- A PoC Cobalt Strike UDRL written in Rust☆35Sep 12, 2026Updated last month
- ☆57Feb 12, 2026Updated 8 months ago
- KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.☆250Sep 15, 2026Updated last month
- ☆72Jul 12, 2026Updated 3 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- Crystal Palace Evasion kit for Sliver☆126Jun 13, 2026Updated 4 months ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- Evasive loader for .NET Framework assemblies☆84May 12, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Rust based C2 Framework☆35Sep 29, 2026Updated last month
- ☆69Oct 27, 2026Updated last week
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆57Oct 13, 2026Updated 3 weeks ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆154Oct 29, 2026Updated last week
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated last week
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 4 months ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Execute shellcode via ASPNET compiler☆61Oct 2, 2025Updated last year
- A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfaci…☆234Updated this week
- goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current…☆70Jun 28, 2026Updated 4 months ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 4 months ago
- Crystal Palace RDLL loader for Adaptix C2 with Ekko sleep obfuscation, IAT hooking via PICO, and per-section permission restoration☆161Jun 5, 2026Updated 5 months ago
- Python scripts that helps in the development of PPKG binaries☆16Jul 31, 2026Updated 3 months ago
- ☆37Sep 6, 2026Updated 2 months ago
- Kernel process termination using Microsoft's own signed driver.☆62Aug 10, 2026Updated 2 months ago
- ☆53Oct 4, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- PIC shellcode agent based on Stardust framework and Crystal Palace☆94Updated this week
- Repository for various Beacon Object Files (BOFs)☆185Oct 22, 2026Updated 2 weeks ago
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- A Sliver C2 module for NetExec☆13Updated this week
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shel…☆79Jun 24, 2026Updated 4 months ago