Another FAFO project: Weaponizing MSI installers for fileless code execution
☆59Aug 12, 2026Updated 2 months ago
Alternatives and similar repositories for DFMI
Users that are interested in DFMI are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A powerful shell script for creating custom WSL (Windows Subsystem for Linux) distributions with embedded payloads.☆73Nov 16, 2025Updated 11 months ago
- A FAFO project: Command execution and data exfiltration of any kind through live streaming platforms☆30Aug 12, 2026Updated 2 months ago
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆36Feb 25, 2026Updated 8 months ago
- A havoc UI python module to help in reporting and vulnerabilities to exploit on an internal network.☆11Oct 31, 2023Updated 2 years ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆146Jan 29, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- ☆50Oct 4, 2026Updated 3 weeks ago
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated last month
- Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.☆66Mar 2, 2026Updated 7 months ago
- ☆16Jan 15, 2026Updated 9 months ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆112Jul 26, 2026Updated 2 months ago
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆30Jul 11, 2025Updated last year
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 3 months ago
- A self-contained, EDR-evasive Active Directory privilege archaeology engine. V2 no longer requires SharpHound — it collects directly from…☆27Apr 29, 2026Updated 5 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- RunPE implementation with multiple evasive techniques (2)☆13Sep 25, 2025Updated last year
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated last month
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆300Feb 21, 2026Updated 8 months ago
- ClickForClickOnce - Generate configurable clickonce payloads☆106Apr 17, 2026Updated 6 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 4 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- DeadManSwitch in rust with several triggers (remote local and network)☆28Nov 19, 2025Updated 11 months ago
- Active network shares enumeration tool.☆39Jul 17, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆343Feb 2, 2026Updated 8 months ago
- Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.☆23Jul 11, 2026Updated 3 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆81Sep 18, 2026Updated last month
- ☆53Nov 26, 2025Updated 10 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆149Apr 22, 2026Updated 6 months ago
- 7z exploit POC versions prior to 25.01☆32Aug 11, 2025Updated last year
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- Combining KslDump and GhostKatz to dump LSASS using no-vulnerability KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WD…☆12Jul 6, 2026Updated 3 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆152Aug 18, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆110Oct 11, 2026Updated 2 weeks ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated 3 weeks ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 2 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- Chisel new generation, written in rust. SSH under WSS with some customization.☆138Jan 24, 2026Updated 9 months ago