π§ββοΈ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
β1,358Mar 27, 2026Updated 4 months ago
Alternatives and similar repositories for Loki
Users that are interested in Loki are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike BOF for evasive .NET assembly executionβ326Mar 31, 2025Updated last year
- A tool to transform Chromium browsers into a C2 Implantβ596Dec 17, 2025Updated 7 months ago
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive β¦β1,514May 5, 2026Updated 3 months ago
- Weaponizing DCOM for NTLM Authentication Coercionsβ275Jul 1, 2025Updated last year
- A BOF that runs unmanaged PEs inlineβ703Oct 23, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI β’ AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Evasion kit for Cobalt Strikeβ486Jun 5, 2026Updated 2 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijackingβ460Jun 27, 2025Updated last year
- AdaptixC2 is a highly modular advanced redteam toolkitβ3,498Aug 2, 2026Updated last week
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.β362Updated this week
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)β745May 7, 2025Updated last year
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dllβ155Apr 18, 2025Updated last year
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the β¦β1,897Nov 3, 2024Updated last year
- Reaping treasures from strings in remote processes memoryβ288Feb 8, 2025Updated last year
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strikeβ238Apr 11, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows remote execution multitoolβ809Mar 25, 2026Updated 4 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automatβ¦β312Aug 6, 2026Updated last week
- Lab research on Windows loader internals, PE loading, stack artifacts, and execution tradeoffs.β242May 4, 2026Updated 3 months ago
- Stealthily inject shellcode into an executableβ480Oct 19, 2025Updated 9 months ago
- Nameless C2 - A C2 with all its components written in Rustβ283Sep 26, 2024Updated last year
- Cobalt Strike HTTPS beaconing over Microsoft Graph APIβ635Jun 25, 2024Updated 2 years ago
- Remote operations commands implemented using Beacon Object Filesβ1,178Jul 20, 2026Updated 3 weeks ago
- Collection of UAC Bypass Techniques Weaponized as BOFsβ652Feb 21, 2024Updated 2 years ago
- A BOF that's a BOF Loader and moreβ211Apr 6, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI β’ AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotelyβ392Dec 13, 2024Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.β458Dec 21, 2023Updated 2 years ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion featuresβ206Apr 21, 2025Updated last year
- BOF with Synthetic Stackframeβ259Oct 30, 2025Updated 9 months ago
- Collection of Beacon Object Files (BOF) for Cobalt Strikeβ711Jul 16, 2026Updated 3 weeks ago
- Situational Awareness commands implemented using Beacon Object Filesβ1,858Jul 27, 2026Updated 2 weeks ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.β140Jan 17, 2026Updated 6 months ago
- Windows protocol library, including SMB and RPC implementations, among others.β823Aug 5, 2026Updated last week
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordonβs (@YuG0rd) BadSuccessor attack from Akamai.β424Sep 26, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Chrome browser extension-based Command & Controlβ264Mar 18, 2026Updated 4 months ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird β¦β807Jan 26, 2026Updated 6 months ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!β1,432Nov 22, 2023Updated 2 years ago
- COM ViewLogger β new malware keylogging techniqueβ410Jan 6, 2025Updated last year
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!β566May 9, 2025Updated last year
- Dump cookies and credentials directly from Chrome/Edge process memoryβ1,492Apr 9, 2026Updated 4 months ago
- ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.β531Mar 7, 2026Updated 5 months ago