Alternatives and similar repositories for pycobalt:

Users that are interested in pycobalt are comparing it to the libraries listed below

• rvrsh3ll / CPLResourceRunner
  Run shellcode from resource
  ☆254Updated 4 years ago
• threatexpress / cs2modrewrite
  Convert Cobalt Strike profiles to modrewrite scripts
  ☆592Updated 2 years ago
• outflanknl / Recon-AD
  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  ☆322Updated 5 years ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆474Updated 2 years ago
• anthemtotheego / SharpExec
  ☆350Updated 3 years ago
• ryhanson / ExternalC2
  A library for integrating communication channels with the Cobalt Strike External C2 server
  ☆283Updated 7 years ago
• b4rtik / metasploit-execute-assembly
  Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
  ☆345Updated 4 years ago
• b4rtik / ATPMiniDump
  Evading WinDefender ATP credential-theft
  ☆254Updated 5 years ago
• RedSiege / AggressorAssessor
  Aggressor scripts for phases of a pen test or red team assessment
  ☆179Updated 6 months ago
• 0xthirteen / StayKit
  Cobalt Strike kit for Persistence
  ☆470Updated 5 years ago
• threatexpress / aggressor-scripts
  Cobalt Strike Aggressor Scripts
  ☆139Updated 3 months ago
• 3gstudent / msbuild-inline-task
  ☆186Updated 3 years ago
• rxwx / spoolsystem
  Print Spooler Named Pipe Impersonation for Cobalt Strike
  ☆262Updated 4 years ago
• outflanknl / NetshHelperBeacon
  Example DLL to load from Windows NetShell
  ☆178Updated 8 years ago
• outflanknl / FindObjects-BOF
  A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…
  ☆267Updated last year
• phackt / stager.dll
  Code from this article: https://blog.rapid7.com/2018/05/03/hiding-metasploit-shellcode-to-evade-windows-defender/
  ☆174Updated 4 years ago
• BC-SECURITY / Invoke-PrintDemon
  This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.
  ☆200Updated 4 years ago
• bytecod3r / Cobaltstrike-Aggressor-Scripts-Collection
  Collection of tested Cobaltstrike aggressor scripts.
  ☆111Updated 4 years ago
• outflanknl / Ps-Tools
  Ps-Tools, an advanced process monitoring toolkit for offensive operations
  ☆337Updated 4 years ago
• pkb1s / SharpAllowedToAct
  Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)
  ☆187Updated 4 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆231Updated 2 years ago
• jfmaes / SharpZipRunner
  Executes position independent shellcode from an encrypted zip
  ☆301Updated 4 years ago
• newsoft / adduser
  Programmatically create an administrative user under Windows
  ☆179Updated 7 years ago
• 001SPARTaN / aggressor_scripts
  A collection of useful scripts for Cobalt Strike
  ☆168Updated 6 months ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆269Updated 5 years ago
• 0xthirteen / SharpMove
  .NET Project for performing Authenticated Remote Execution
  ☆391Updated 2 years ago
• 0xthirteen / MoveKit
  Cobalt Strike kit for Lateral Movement
  ☆660Updated 5 years ago
• zcgonvh / NTDSDumpEx
  NTDS.dit offline dumper with non-elevated
  ☆215Updated 7 years ago
• bluscreenofjeff / Malleable-C2-Randomizer
  A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
  ☆437Updated 2 years ago
• outflanknl / InlineWhispers
  Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)
  ☆311Updated 3 years ago