Extract C2 Traffic
☆256Nov 25, 2024Updated last year
Alternatives and similar repositories for C2-Hunter
Users that are interested in C2-Hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bypass Malware Sandbox Evasion Ram check☆140Jan 3, 2023Updated 3 years ago
- MacroExploit use in excel sheet☆21Jun 12, 2023Updated 3 years ago
- A C# Command & Control framework☆1,026Mar 28, 2024Updated 2 years ago
- Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes☆1,060Jun 20, 2023Updated 3 years ago
- Generate an obfuscated DLL that will disable AMSI & ETW☆335Jul 15, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A dynamic unpacking tool☆154Sep 17, 2023Updated 3 years ago
- Bypass Malware Time Delays☆106Sep 23, 2022Updated 4 years ago
- ETW based POC to identify direct and indirect syscalls☆197Apr 19, 2023Updated 3 years ago
- EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offer …☆374Apr 6, 2024Updated 2 years ago
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆284Feb 24, 2025Updated last year
- APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the …☆1,431Sep 20, 2026Updated last month
- kill anti-malware protected processes ( BYOVD )☆1,000Jul 21, 2023Updated 3 years ago
- Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles☆203Jun 25, 2024Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,033Jun 4, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs☆1,233Aug 18, 2023Updated 3 years ago
- Simple Kernel Mode Driver for Swapping Process Token☆130Sep 19, 2026Updated last month
- abusing Process Hacker driver to terminate other processes (BYOVD)☆83May 23, 2023Updated 3 years ago
- Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap☆247Aug 2, 2023Updated 3 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,428Oct 27, 2023Updated 3 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp…☆442Aug 2, 2023Updated 3 years ago
- Spartacus DLL/COM Hijacking Toolkit☆1,083Feb 1, 2024Updated 2 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Now You See Me, Now You Don't☆1,075May 22, 2026Updated 5 months ago
- elevate to SYSTEM any way we can! Metasploit and PSEXEC getsystem alternative☆384Updated this week
- Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.☆677Nov 9, 2023Updated 2 years ago
- ☆188Jan 23, 2024Updated 2 years ago
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆116Jul 17, 2024Updated 2 years ago
- it is very good☆515Dec 20, 2022Updated 3 years ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆39Nov 16, 2023Updated 2 years ago
- HVNC for Cobalt Strike☆1,350Dec 7, 2023Updated 2 years ago
- pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory☆338Jun 22, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.☆844Jul 2, 2024Updated 2 years ago
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Feb 13, 2023Updated 3 years ago
- Windows x64 kernel mode rootkit process hollowing POC.☆194Jun 30, 2023Updated 3 years ago
- Loading Remote AES Encrypted PE in memory , Decrypted it and run it☆1,043Aug 29, 2023Updated 3 years ago
- Infect Shared Files In Memory for Lateral Movement☆189Dec 14, 2022Updated 3 years ago