Tylous / MangleLinks
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
☆105Updated 3 years ago
Alternatives and similar repositories for Mangle
Users that are interested in Mangle are comparing it to the libraries listed below
Sorting:
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆184Updated 10 months ago
- Shaco is a linux agent for havoc☆169Updated 2 years ago
- A Mythic agent for Windows written in C☆156Updated this week
- ☆169Updated last year
- Lateral Movement Using DCOM and DLL Hijacking☆326Updated 2 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆129Updated 2 years ago
- Havoc C2 profile generator☆101Updated 6 months ago
- C or BOF file to extract WebKit master key to decrypt user cookie☆207Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆194Updated last year
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆207Updated 2 years ago
- 「💀」Proof of concept on BYOVD attack☆165Updated last year
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆155Updated last year
- ☆186Updated 7 months ago
- Collection of BOFs created for red team/adversary engagements. Created to be small and interchangeable, for quick recon or eventing.☆230Updated 2 weeks ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆138Updated 3 years ago
- Port of Cobalt Strike's Process Inject Kit☆190Updated last year
- Evasive Golang Loader☆137Updated last year
- Adversary Emulation Framework☆129Updated 7 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆192Updated 3 months ago
- A fast TCP/UDP tunnel over HTTP☆23Updated last year
- ☆209Updated 2 years ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆271Updated 2 years ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆153Updated 6 months ago
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆259Updated this week
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆285Updated 2 years ago
- The Official Sliver Armory☆129Updated 9 months ago
- Patching AmsiOpenSession by forcing an error branching☆154Updated 2 years ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆231Updated 11 months ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆212Updated last year
- ☆244Updated last year