cpu0x00 / Ghost

Related projects ⓘ

Alternatives and complementary repositories for Ghost

• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆221Updated last month
• trickster0 / NamelessC2
  Nameless C2 - A C2 with all its components written in Rust
  ☆241Updated last month
• RedefiningReality / Cobalt-Strike
  Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
  ☆246Updated 6 months ago
• Tylous / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆168Updated 2 months ago
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆266Updated 7 months ago
• ricardojoserf / TrickDump
  Dump lsass using only NTAPIs running 3 programs to create 3 JSON and 1 ZIP file... and generate the MiniDump later!
  ☆351Updated last month
• senzee1984 / MutationGate
  Use hardware breakpoint to dynamically change SSN in run-time
  ☆234Updated 7 months ago
• netero1010 / GhostTask
  A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.
  ☆473Updated last year
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆324Updated 11 months ago
• REDMED-X / OperatorsKit
  Collection of Beacon Object Files (BOF) for Cobalt Strike
  ☆540Updated 4 months ago
• icyguider / UAC-BOF-Bonanza
  Collection of UAC Bypass Techniques Weaponized as BOFs
  ☆408Updated 9 months ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆309Updated last year
• Maldev-Academy / EntropyReducer
  Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists
  ☆383Updated last year
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆269Updated 3 months ago
• S3cur3Th1sSh1t / Caro-Kann
  Encrypted shellcode Injection to avoid Kernel triggered memory scans
  ☆344Updated last year
• matro7sh / myph
  shellcode loader for your evasion needs
  ☆268Updated last week
• cxnturi0n / convoC2
  C2 infrastructure that allows Red Teamers to execute system commands on compromised hosts through Microsoft Teams.
  ☆156Updated last week
• senzee1984 / EDRPrison
  Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
  ☆285Updated 3 months ago
• RalfHacker / Kerbeus-BOF
  BOF for Kerberos abuse (an implementation of some important features of the Rubeus).
  ☆396Updated 2 weeks ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆171Updated 10 months ago
• Maldev-Academy / Christmas
  ☆244Updated 10 months ago
• vxCrypt0r / Voidmaw
  A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders imp…
  ☆205Updated last month
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆130Updated 3 months ago
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆144Updated last year
• WKL-Sec / dcomhijack
  Lateral Movement Using DCOM and DLL Hijacking
  ☆281Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆224Updated 11 months ago
• icyguider / LatLoader
  PoC module to demonstrate automated lateral movement with the Havoc C2 framework.
  ☆274Updated 11 months ago
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆455Updated 9 months ago