A Cobalt Strike 4.12+ User-Defined C2 (UDC2) implementation that tunnels all Beacon traffic through Microsoft Teams TURN relay infrastructure.
☆19Nov 6, 2026Updated last week
Alternatives and similar repositories for turn-udc2
Users that are interested in turn-udc2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Custom PIC C2 agent for Adaptix with no reflective loader.☆35Updated this week
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆48Jun 18, 2026Updated 4 months ago
- Beacon Object File (BOF) for dumping certificates (and, when possible, private keys) on Windows☆13Jun 2, 2025Updated last year
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated 3 weeks ago
- Post-ex tool to interact with chromium browser when CDP is enabled☆47Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆26Oct 8, 2026Updated last month
- ☆52Dec 5, 2025Updated 11 months ago
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆29Sep 3, 2026Updated 2 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆113Oct 11, 2026Updated last month
- SauronEye is an @Adaptix-Framework post-exploitation BOF tool for searching directories and file contents for specific keywords discreetl…☆14Nov 24, 2025Updated 11 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- A simple C++ Windows tool to get information about processes exposing named pipes.☆42Mar 6, 2025Updated last year
- ☆52Sep 29, 2026Updated last month
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆64Nov 1, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A cmake template for crystal palace☆49Dec 20, 2025Updated 10 months ago
- Evasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory☆74Nov 6, 2026Updated last week
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆118Jan 26, 2026Updated 9 months ago
- Microsoft Graph API post-exploitation framework with a browser-based GUI.☆59Apr 15, 2026Updated 6 months ago
- ☆16Oct 14, 2026Updated 3 weeks ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆33Sep 24, 2025Updated last year
- Check if your AV/EDR does inline hooking, displays the hooked functions and allows you to compare them with the original ones.☆44Apr 2, 2026Updated 7 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆84Aug 22, 2026Updated 2 months ago
- C library for Diffie Hellman key exchange with Curve448 und Curve25519. Extracted from OpenSSL.☆11Jan 7, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆11Mar 24, 2026Updated 7 months ago
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated last year
- Detection for every software TPM, TPM passthrough, TPM proxying, EDS/EK/PCR spoofing, and VMs☆44Updated this week
- AWS S3 User-Defined C2☆27Oct 6, 2026Updated last month
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 5 months ago
- Bof of RegPwn by MDSec☆130Mar 15, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆110Oct 27, 2026Updated 2 weeks ago
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- Proof of concept to detect module stomping detection by looking for modified .pdata sections.☆41Jun 11, 2026Updated 5 months ago
- POC Utilizing the new SleepMask-VS kit to utilize RC4 encryption.☆12Mar 4, 2025Updated last year
- Wire and behavioural de-fingerprinting patches for impacket and NetExec☆23Nov 5, 2026Updated last week
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
Are these results useful?