ariary / fileless-xecLinks
Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)
☆204Updated last year
Alternatives and similar repositories for fileless-xec
Users that are interested in fileless-xec are comparing it to the libraries listed below
Sorting:
- Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)☆163Updated 3 years ago
- eXtensiable Malware Toolkit: Full Featured Golang C2 Framework with Awesome Features☆100Updated 2 months ago
- WIP shellcode loader in nim with EDR evasion techniques☆220Updated 3 years ago
- KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this p…☆223Updated 2 years ago
- indirect syscalls for AV/EDR evasion in Go assembly☆339Updated 2 years ago
- A C2 framework for initial access in Go☆193Updated 3 years ago
- Get fresh Syscalls from a fresh ntdll.dll copy☆235Updated 3 years ago
- grim reaper c2☆339Updated 2 years ago
- Go shellcode loader that combines multiple evasion techniques☆382Updated 2 years ago
- A BOF to automate common persistence tasks for red teamers☆289Updated 2 years ago
- Extendable payload obfuscation and delivery framework☆145Updated 2 years ago
- Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC☆178Updated 3 years ago
- A Nim implementation of reflective PE-Loading from memory☆293Updated last year
- (Demo) 3rd party agent for Havoc☆144Updated 2 years ago
- A technique of hiding malicious shellcode via Shannon encoding.☆259Updated 2 years ago
- ☆248Updated 2 years ago
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆301Updated 2 years ago
- Post-exploitation agent for Merlin☆200Updated 5 months ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆336Updated last year
- Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.☆126Updated 2 years ago
- ☆170Updated 4 years ago
- Pure C++, weaponized, fully automated implementation of RottenPotatoNG☆311Updated 4 years ago
- Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)☆199Updated 3 years ago
- This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python withou…☆188Updated 2 months ago
- Automated compiler obfuscation for nim☆140Updated 3 years ago
- C# Lsass parser☆297Updated 3 years ago
- Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon☆333Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆306Updated last year
- Process Ghosting Tool☆174Updated 4 years ago
- The Official Sliver Armory☆117Updated 5 months ago