A small How-To on creating your own weaponized WSL file
☆132Jul 23, 2025Updated last year
Alternatives and similar repositories for WSL-Payloads
Users that are interested in WSL-Payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A powerful shell script for creating custom WSL (Windows Subsystem for Linux) distributions with embedded payloads.☆73Nov 16, 2025Updated 11 months ago
- ☆166May 5, 2025Updated last year
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆247Apr 11, 2026Updated 6 months ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- C2 Agent fully PIC for Mythic with advanced evasion capabilities, dotnet/powershell/shellcode/bof memory executions, lateral moviments, p…☆218Dec 30, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Local SYSTEM auth trigger for relaying - X☆172Jul 23, 2025Updated last year
- ClickForClickOnce - Generate configurable clickonce payloads☆107Apr 17, 2026Updated 6 months ago
- Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence☆67Jun 23, 2025Updated last year
- Enumerate Domain Users Without Authentication☆312Apr 22, 2025Updated last year
- Random BOFs for LDAP tradecraft☆74Sep 9, 2025Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- various methods of making API calls☆19Feb 1, 2025Updated last year
- A python script that automates a C2 Profile build☆49Jul 21, 2026Updated 3 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Generate an Alphabetical Polymorphic Shellcode☆151Aug 19, 2025Updated last year
- A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such …☆441Jun 9, 2026Updated 4 months ago
- Stage 0☆170Dec 18, 2024Updated last year
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated last year
- ☆52Dec 5, 2025Updated 10 months ago
- A Mythic agent for Windows written in C☆189Aug 22, 2026Updated 2 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated last year
- inspired by mr d0x filefix☆16Feb 4, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Obex – Blocking unwanted DLLs in user mode☆281Sep 18, 2025Updated last year
- ☆61Jun 2, 2025Updated last year
- A collection of BOF-PE's that allow running tailscale from memory☆141Aug 27, 2026Updated 2 months ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆100Jul 3, 2025Updated last year
- Monitoring tool to detect patterns or IOCs (strings, regex, VirusTotal) and alert you and your team via console, Telegram or SMS written …☆17Feb 17, 2026Updated 8 months ago
- A tool for coercing and relaying Kerberos authentication over DCOM and RPC.☆154Jul 17, 2025Updated last year
- Reaping treasures from strings in remote processes memory☆287Feb 8, 2025Updated last year
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆469Jun 27, 2025Updated last year
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆117Jan 20, 2025Updated last year
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- Your Skyfall Infrastructure Pack☆104Aug 1, 2026Updated 3 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆103Jul 23, 2025Updated last year
- A BOF that's a BOF Loader and more☆212Apr 6, 2026Updated 6 months ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- ForsHops☆157Mar 25, 2025Updated last year