Alternatives and similar repositories for Ox-C2

Users that are interested in Ox-C2 are comparing it to the libraries listed below

• whokilleddb / exe_who
  Executables on Disk? Bleh 🤮
  ☆111Updated 2 years ago
• postrequest / donut-rs
  Donut generator in rust.
  ☆28Updated 3 years ago
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆84Updated 9 months ago
• Kudaes / RustChain
  Hide memory artifacts using ROP and hardware breakpoints.
  ☆147Updated 2 years ago
• trickster0 / EDR_Detector
  EDR Detector that can find what kind of endpoint solution is being used according to drivers in the system.
  ☆93Updated 4 years ago
• Kudaes / RustHollow
  Inject a shellcode in a remote process using Process Hollowing.
  ☆54Updated 4 years ago
• joaoviictorti / coffeeldr
  A COFF Loader written in Rust
  ☆134Updated last month
• Kudaes / CustomEntryPoint
  Select any exported function in a dll as the new dll's entry point.
  ☆82Updated last year
• cr7pt0pl4gu3 / Pestilence
  Shellcode loader designed for evasion. Coded in Rust.
  ☆134Updated 2 years ago
• aancw / DllProxy-rs
  Rust Implementation of SharpDllProxy for DLL Proxying Technique
  ☆29Updated 3 years ago
• ZeroMemoryEx / Overlord
  abusing Process Hacker driver to terminate other processes (BYOVD)
  ☆83Updated 2 years ago
• CymulateResearch / Blindside
  Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms
  ☆133Updated 3 years ago
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆50Updated 2 years ago
• tijme / amd-ryzen-master-driver-v17-exploit
  Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).
  ☆153Updated 3 years ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆79Updated last year
• klezVirus / NimlineWhispers3
  A tool for converting SysWhispers3 syscalls for use with Nim projects
  ☆147Updated 3 years ago
• Kudaes / Dumpy
  Reuse open handles to dynamically dump LSASS.
  ☆246Updated last year
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆75Updated 2 months ago
• thiagopeixoto / massayo
  Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL
  ☆64Updated 3 years ago
• Signal-Labs / iat_unhook_sample
  (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…
  ☆136Updated 10 months ago
• jonny-jhnson / RandomPOCs
  Repo that holds random POCs
  ☆52Updated 2 years ago
• Cobalt-Strike / obfuscator-llvm
  ☆57Updated 2 years ago
• eversinc33 / GpuDecryptShellcode
  XOR decrypting shellcode using the GPU with OpenCL.
  ☆120Updated 8 months ago
• Shrfnt77 / DynamicSyscalls
  DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
  ☆66Updated 3 years ago
• CodeXTF2 / HavocNotion
  A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …
  ☆91Updated 3 years ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆148Updated 2 years ago
• lap1nou / CLR_Heap_encryption
  ☆100Updated 2 years ago
• HavocFramework / Talon
  (Demo) 3rd party agent for Havoc
  ☆147Updated 2 years ago
• securifybv / BOFRyptor
  ☆122Updated 2 years ago
• 0x00Check / ExploitLeakedHandle
  Identify and exploit leaked handles for local privilege escalation.
  ☆111Updated 2 years ago