d4rckh / grc2
grim reaper c2
☆333Updated last year
Related projects: ⓘ
- Nim-based assembly packer and shellcode loader for opsec & profit☆449Updated last year
- Fileless Command Execution for Lateral Movement in Nim☆362Updated 9 months ago
- XLL Phishing Tradecraft☆387Updated 2 years ago
- Get fresh Syscalls from a fresh ntdll.dll copy☆220Updated 2 years ago
- Shellcode launcher for AV bypass☆215Updated 8 months ago
- FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads☆370Updated 2 years ago
- A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk☆418Updated 2 months ago
- Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…☆427Updated last year
- .NET, PE, & Raw Shellcode Packer/Loader Written in Nim☆736Updated last year
- ☆497Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆316Updated last month
- Go shellcode loader that combines multiple evasion techniques☆337Updated last year
- Nimbo-C2 is yet another (simple and lightweight) C2 framework☆339Updated 4 months ago
- A BOF to automate common persistence tasks for red teamers☆263Updated last year
- A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.☆436Updated 5 months ago
- A C2 framework for initial access in Go☆166Updated 2 years ago
- Creating a repository with all public Beacon Object Files (BoFs)☆408Updated last year
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆367Updated last month
- WIP shellcode loader in nim with EDR evasion techniques☆208Updated 2 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆374Updated last year
- Various Cobalt Strike BOFs☆557Updated last year
- A Nim implementation of reflective PE-Loading from memory☆262Updated 2 weeks ago
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆430Updated last year
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆256Updated 2 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆511Updated 2 months ago
- Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.☆327Updated last year
- WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement☆360Updated 2 years ago
- Kill AV/EDR leveraging BYOVD attack☆301Updated last year
- ☆228Updated this week
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆365Updated 3 months ago