ariary / fileless-xecLinks
Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)
☆204Updated last year
Alternatives and similar repositories for fileless-xec
Users that are interested in fileless-xec are comparing it to the libraries listed below
Sorting:
- Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)☆162Updated 3 years ago
- WIP shellcode loader in nim with EDR evasion techniques☆220Updated 3 years ago
- eXtensiable Malware Toolkit: Full Featured Golang C2 Framework with Awesome Features☆100Updated 2 months ago
- KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this p…☆223Updated 2 years ago
- A C2 framework for initial access in Go☆196Updated 3 years ago
- A BOF to automate common persistence tasks for red teamers☆290Updated 2 years ago
- indirect syscalls for AV/EDR evasion in Go assembly☆341Updated 2 years ago
- Go shellcode loader that combines multiple evasion techniques☆382Updated 2 years ago
- A technique of hiding malicious shellcode via Shannon encoding.☆261Updated 3 years ago
- (Demo) 3rd party agent for Havoc☆145Updated 2 years ago
- Extendable payload obfuscation and delivery framework☆145Updated 2 years ago
- The Official Sliver Armory☆118Updated 6 months ago
- grim reaper c2☆339Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆336Updated last year
- Get fresh Syscalls from a fresh ntdll.dll copy☆235Updated 3 years ago
- Post-exploitation agent for Merlin☆200Updated 6 months ago
- ☆170Updated 4 years ago
- A basic emulation of an "RPC Backdoor"☆243Updated 3 years ago
- Convert shellcode into different formats!☆356Updated 2 years ago
- ☆245Updated 2 years ago
- Pass the Hash to a named pipe for token Impersonation☆306Updated last year
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆300Updated 3 years ago
- Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.☆190Updated 4 years ago
- Pure C++, weaponized, fully automated implementation of RottenPotatoNG☆312Updated 4 years ago
- Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC☆178Updated 3 years ago
- WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement☆370Updated 3 years ago
- Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.☆126Updated 2 years ago
- COM Hijacking VOODOO☆317Updated 7 months ago
- A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use int…☆218Updated 7 months ago
- Process Ghosting Tool☆174Updated 4 years ago