smugglo - an easy to use script for wrapping files into self-dropping HTML payloads to bypass content filters
☆133Mar 25, 2025Updated last year
Alternatives and similar repositories for smugglo
Users that are interested in smugglo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆39Mar 28, 2025Updated last year
- peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.☆233Apr 14, 2025Updated last year
- b3acon - a mail-based C2 that communicates via an in-memory C# IMAP client dynamically compiled in memory using PowerShell.☆46Apr 21, 2025Updated last year
- New 0 day vulnerability allowing to leak NTLM hashes from browsers with one click☆208Nov 18, 2025Updated 11 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 2 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆469Jun 27, 2025Updated last year
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆208Mar 6, 2025Updated last year
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆632Jan 20, 2026Updated 9 months ago
- Stage 0☆170Dec 18, 2024Updated last year
- ☆48Apr 9, 2025Updated last year
- Impersonate Tokens using only NTAPI functions☆85Apr 4, 2025Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆365Nov 19, 2024Updated last year
- Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.☆304May 2, 2025Updated last year
- This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim …☆213Sep 19, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- .bin file to shellcode convertor☆39Jul 5, 2024Updated 2 years ago
- ShadowPhish is an advanced APT awareness toolkit designed to simulate real-world phishing, malware delivery, deepfakes, smishing/vishing,…☆246Apr 18, 2025Updated last year
- ☆80Jan 1, 2026Updated 10 months ago
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆105Jul 9, 2025Updated last year
- Covert data exfiltration via DNS☆53Feb 8, 2025Updated last year
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆271Apr 8, 2025Updated last year
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆177Jun 19, 2026Updated 4 months ago
- Windows Shell Link (LNK) Proof of Concept☆16Jul 19, 2025Updated last year
- Python3 utility for creating zip files that smuggle additional data for later extraction☆275May 15, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Golang Automation Framework for Cobalt Strike using the Rest API☆59Apr 10, 2026Updated 6 months ago
- Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11☆88Jan 26, 2026Updated 9 months ago
- TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …☆427Jan 23, 2025Updated last year
- ☆166May 5, 2025Updated last year
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆279Jun 18, 2025Updated last year
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,565May 5, 2026Updated 6 months ago
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆121Oct 20, 2024Updated 2 years ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆152Jan 17, 2026Updated 9 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆103Jul 23, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Easy to use, open-source infrastructure management platform, crafted specifically for red team engagements.☆111Jul 17, 2026Updated 3 months ago
- Ghosting-AMSI☆252Apr 24, 2025Updated last year
- ↕️🤫 Stealth redirector for your red team operation security☆1,121Jul 20, 2026Updated 3 months ago
- This exploit is utilising AddressOfEntryPoint of process which is RX and using WriteProcessMemory internal magic to change the permission…☆20Oct 31, 2024Updated 2 years ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆245Feb 12, 2025Updated last year
- A powerful, modular, lightweight and efficient command & control framework written in Nim.☆229Nov 3, 2025Updated last year
- Your Skyfall Infrastructure Pack☆104Aug 1, 2026Updated 3 months ago