Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
☆17May 18, 2021Updated 5 years ago
Alternatives and similar repositories for Malleable-C2-Profiles
Users that are interested in Malleable-C2-Profiles are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Malware campaigns and APTs research by BlackArrow☆19Apr 30, 2020Updated 6 years ago
- Ansible Cobalt Strike (Docker)☆15Jan 8, 2022Updated 4 years ago
- Discover web technologies in web applications from your terminal☆56Nov 18, 2021Updated 4 years ago
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- Continuous kerberoast monitor☆45Aug 24, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- C# exfiltration tool☆13Sep 24, 2021Updated 5 years ago
- BloodCheck enables Red and Blue Teams to manage multiple Neo4j databases and run Cypher queries against a BloodHound dataset.☆17Jun 20, 2021Updated 5 years ago
- ☆27Oct 18, 2026Updated 2 weeks ago
- Slide decks and/or materials from conference presentations☆56Nov 15, 2022Updated 3 years ago
- Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…☆67Nov 14, 2020Updated 5 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆126May 22, 2021Updated 5 years ago
- CLI tools using Harpoon features☆24Nov 7, 2023Updated 2 years ago
- ☆11Oct 3, 2021Updated 5 years ago
- ☆26Mar 10, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Command line interface to dump LSASS memory to disk via SilentProcessExit☆458Dec 23, 2020Updated 5 years ago
- Detect strange memory regions and DLLs☆190Jan 20, 2022Updated 4 years ago
- A collection of various tools for red-teaming exercises. A mix of C#, Powershell, & Python☆106Jul 26, 2024Updated 2 years ago
- Configuration Extractor for BlackCat Ransomware☆29Mar 18, 2022Updated 4 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- Injection of MSIL using Cecil☆12Jul 28, 2015Updated 11 years ago
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆52Dec 21, 2021Updated 4 years ago
- <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en" xml:lang="en" class=…☆11Jun 13, 2017Updated 9 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆246Jul 14, 2021Updated 5 years ago
- #INFILTRATE20 raptor's party pack.☆30Jul 18, 2026Updated 3 months ago
- Simple PoC Python agent to showcase Havoc C2's custom agent interface. Not operationally safe or stable. Released with accompanying blog …☆87Nov 8, 2023Updated 2 years ago
- This script runs multithreading module that connects to a remote TCP server, monitors active (opened) Microsoft Word documents (.doc,.doc…☆32Jul 24, 2020Updated 6 years ago
- ☆24Sep 26, 2021Updated 5 years ago
- Proof-of-concept obfuscation toolkit for C# post-exploitation tools☆432Jul 22, 2022Updated 4 years ago
- Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies☆186Mar 19, 2023Updated 3 years ago
- The Totally Legit Authentication Dialog☆12Sep 5, 2023Updated 3 years ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C code to enable ETW tracing for Dotnet Assemblies☆31Aug 12, 2022Updated 4 years ago
- ☆13Jan 30, 2023Updated 3 years ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆62Oct 28, 2022Updated 4 years ago
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆143Sep 29, 2021Updated 5 years ago
- C# .Net 5.0 project to build BOF (Beacon Object Files) in mass☆24Oct 2, 2026Updated last month
- EDR Evasion - Combination of SwampThing - TikiTorch☆30May 28, 2020Updated 6 years ago