bats3c / shad0wLinks
A post exploitation framework designed to operate covertly on heavily monitored environments
☆2,167Updated 4 years ago
Alternatives and similar repositories for shad0w
Users that are interested in shad0w are comparing it to the libraries listed below
Sorting:
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,693Updated 3 months ago
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆2,077Updated last month
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,305Updated 2 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,863Updated 2 years ago
- Extract credentials from lsass remotely☆2,172Updated 2 weeks ago
- Identifies the bytes that Microsoft Defender flags on.☆2,564Updated last week
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆2,107Updated last year
- Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.☆1,560Updated 4 years ago
- ☆2,171Updated 2 years ago
- DeimosC2 is a Golang command and control framework for post-exploitation.☆1,143Updated 8 months ago
- Windows Event Log Killer☆1,807Updated 2 years ago
- Some usefull Scripts and Executables for Pentest & Forensics☆1,146Updated last month
- Mimikatz implementation in pure Python☆3,227Updated last week
- Starkiller is a Frontend for PowerShell Empire.☆1,597Updated last month
- Automation for internal Windows Penetrationtest / AD-Security☆3,626Updated 4 months ago
- macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other f…☆2,293Updated last year
- Open source C2 server created for stealth red team operations☆830Updated 3 years ago
- Open-Source Shellcode & PE Packer☆2,047Updated last year
- LSASS memory dumper using direct system calls and API unhooking.☆1,571Updated 5 years ago
- Some notes and examples for cobalt strike's functionality☆1,121Updated 3 years ago
- ☆1,529Updated 2 years ago
- HTA encryption tool for RedTeams☆1,420Updated 3 years ago
- The Hunt for Malicious Strings☆1,345Updated 8 months ago
- Run PowerShell with rundll32. Bypass software restrictions.☆1,821Updated 4 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,622Updated 7 years ago
- Payload Generation Framework☆1,943Updated last year
- Hide your Powershell script in plain sight. Bypass all Powershell security features☆1,295Updated 6 years ago
- Open source pre-operation C2 server based on python and powershell☆759Updated 4 years ago
- Template-Driven AV/EDR Evasion Framework☆1,764Updated 2 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,574Updated 2 years ago