bats3c / shad0wLinks
A post exploitation framework designed to operate covertly on heavily monitored environments
☆2,169Updated 4 years ago
Alternatives and similar repositories for shad0w
Users that are interested in shad0w are comparing it to the libraries listed below
Sorting:
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆2,090Updated 2 months ago
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,722Updated 3 weeks ago
- Extract credentials from lsass remotely☆2,176Updated last month
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,318Updated 2 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,869Updated 2 years ago
- Identifies the bytes that Microsoft Defender flags on.☆2,581Updated last month
- DeimosC2 is a Golang command and control framework for post-exploitation.☆1,151Updated 9 months ago
- Automation for internal Windows Penetrationtest / AD-Security☆3,639Updated 5 months ago
- Starkiller is a Frontend for PowerShell Empire.☆1,617Updated 2 months ago
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆2,123Updated last year
- Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.☆1,567Updated 4 years ago
- ☆2,170Updated 2 years ago
- macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other f…☆2,301Updated last year
- Some usefull Scripts and Executables for Pentest & Forensics☆1,152Updated 2 months ago
- Hide your Powershell script in plain sight. Bypass all Powershell security features☆1,302Updated 6 years ago
- Windows Event Log Killer☆1,810Updated 2 years ago
- Open-Source Shellcode & PE Packer☆2,063Updated 2 years ago
- HTA encryption tool for RedTeams☆1,425Updated 3 years ago
- A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux☆1,417Updated 5 years ago
- Run PowerShell with rundll32. Bypass software restrictions.☆1,822Updated 4 years ago
- Mimikatz implementation in pure Python☆3,242Updated last month
- ☆1,530Updated 2 years ago
- Some notes and examples for cobalt strike's functionality☆1,125Updated 4 years ago
- Open source C2 server created for stealth red team operations☆838Updated 3 years ago
- Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient☆1,551Updated 3 years ago
- LSASS memory dumper using direct system calls and API unhooking.☆1,577Updated 5 years ago
- Open source pre-operation C2 server based on python and powershell☆761Updated 4 years ago
- Defences against Cobalt Strike☆1,293Updated 3 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,594Updated 2 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,633Updated 7 years ago