Mythic Code Signing Wrapper
☆18Oct 27, 2026Updated this week
Alternatives and similar repositories for Signet
Users that are interested in Signet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆21Oct 21, 2026Updated last week
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆18Oct 24, 2026Updated last week
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.☆25Jul 11, 2026Updated 3 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆42Sep 20, 2026Updated last month
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆58Sep 15, 2026Updated last month
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆46Oct 18, 2026Updated last week
- Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax☆13Sep 29, 2026Updated last month
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- A listener profile for the Mythic C2 framework that utilizes AI vendors file API's☆31Oct 2, 2026Updated 3 weeks ago
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated 3 months ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆38Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 9 months ago
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆81Oct 23, 2026Updated last week
- ☆51Oct 4, 2026Updated 3 weeks ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- ☆37May 19, 2026Updated 5 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated last month
- ☆14Jun 24, 2025Updated last year
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆22Updated this week
- ☆19Dec 25, 2025Updated 10 months ago
- bunch of random stuff☆24Sep 11, 2026Updated last month
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆68Oct 7, 2026Updated 3 weeks ago
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆29May 21, 2026Updated 5 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆13May 11, 2026Updated 5 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆74Oct 18, 2026Updated 2 weeks ago
- Clean Indirect Syscalls with Syscall Tampering.☆46Updated this week
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆26Oct 8, 2026Updated 3 weeks ago
- Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.☆31Oct 19, 2026Updated last week
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆110Updated this week
- A pair of scripts to import session and local group information that has been collected from alternate data sources into BloodHound's Neo…☆21Aug 29, 2022Updated 4 years ago
- Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.☆79Oct 18, 2026Updated last week
- Ansible roles to deploy RedELK☆23Feb 15, 2023Updated 3 years ago
- CPL remote trigger☆44Dec 28, 2025Updated 10 months ago