bats3c / shad0wLinks
A post exploitation framework designed to operate covertly on heavily monitored environments
☆2,166Updated 4 years ago
Alternatives and similar repositories for shad0w
Users that are interested in shad0w are comparing it to the libraries listed below
Sorting:
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,705Updated 2 weeks ago
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆2,084Updated 2 months ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,868Updated 2 years ago
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,311Updated 2 years ago
- Extract credentials from lsass remotely☆2,170Updated last month
- Identifies the bytes that Microsoft Defender flags on.☆2,578Updated last month
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆2,121Updated last year
- ☆2,171Updated 2 years ago
- DeimosC2 is a Golang command and control framework for post-exploitation.☆1,149Updated 9 months ago
- Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.☆1,564Updated 4 years ago
- macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other f…☆2,295Updated last year
- Open-Source Shellcode & PE Packer☆2,058Updated last year
- A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux☆1,417Updated 5 years ago
- Some usefull Scripts and Executables for Pentest & Forensics☆1,151Updated last month
- Hide your Powershell script in plain sight. Bypass all Powershell security features☆1,301Updated 6 years ago
- Automation for internal Windows Penetrationtest / AD-Security☆3,634Updated 5 months ago
- Windows Event Log Killer☆1,810Updated 2 years ago
- Starkiller is a Frontend for PowerShell Empire.☆1,607Updated last month
- LSASS memory dumper using direct system calls and API unhooking.☆1,571Updated 5 years ago
- Mimikatz implementation in pure Python☆3,240Updated last month
- Open source C2 server created for stealth red team operations☆833Updated 3 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,589Updated 2 years ago
- Some notes and examples for cobalt strike's functionality☆1,123Updated 3 years ago
- The Hunt for Malicious Strings☆1,355Updated 8 months ago
- Template-Driven AV/EDR Evasion Framework☆1,770Updated 2 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,630Updated 7 years ago
- ☆1,529Updated 2 years ago
- Open source pre-operation C2 server based on python and powershell☆760Updated 4 years ago
- Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient☆1,548Updated 3 years ago
- Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities☆1,656Updated 5 years ago