Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
☆226Aug 10, 2019Updated 7 years ago
Alternatives and similar repositories for zombieant
Users that are interested in zombieant are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems☆134Apr 11, 2019Updated 7 years ago
- PE File Blessing - To continue or not to continue☆86Nov 23, 2019Updated 6 years ago
- C&C to deliver files and shuttle command execution instructions between an external actor and an internal agent with the help of Firefox …☆38Dec 8, 2022Updated 3 years ago
- A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.☆375Aug 13, 2021Updated 5 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆288Oct 31, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- Inject .Net payloads into other .Net assemblies on disk☆60Dec 12, 2019Updated 6 years ago
- Automate AV evasion by calling AMSI☆87May 31, 2023Updated 3 years ago
- Slides and Code for the BHUSA 2019 talk: Flying a False Flag☆236Nov 8, 2019Updated 6 years ago
- BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET☆147Feb 15, 2020Updated 6 years ago
- Tool for interacting with outlook interop during red team engagements☆144Jun 29, 2021Updated 5 years ago
- C# Targeted Attack Reconnissance Tools☆120Jan 11, 2021Updated 5 years ago
- D/Invoke port of UrbanBishop☆109Jul 19, 2020Updated 6 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- The full story of the CLR implementation of Meterpreter☆154Jul 29, 2020Updated 6 years ago
- lateral movement techniques that can be used during red team exercises☆280Jan 13, 2020Updated 6 years ago
- Process reimaging proof of concept code☆95Jun 21, 2019Updated 7 years ago
- ObscurityLabs RedTeam C# Toolkit☆121Sep 3, 2019Updated 7 years ago
- Iterative AD discovery toolkit for offensive operations☆84Mar 16, 2020Updated 6 years ago
- Adaptive DLL hijacking / dynamic export forwarding☆820Jul 6, 2020Updated 6 years ago
- Python api for usage with cobalt strike's External C2 specification☆239Mar 22, 2023Updated 3 years ago
- Evade sysmon and windows event logging☆629Apr 8, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Suite of Shellcode Running Utilities☆112Jan 30, 2020Updated 6 years ago
- Tools for discovery and abuse of COM hijacks☆338Oct 15, 2019Updated 7 years ago
- Also known by Microsoft as Knifecoat☆1,145Dec 22, 2022Updated 3 years ago
- framework to rapidly implement custom droppers for all three major operating systems☆705Feb 24, 2024Updated 2 years ago
- Universal Unhooking☆324Sep 19, 2018Updated 8 years ago
- A Bind Shell Using the Fax Service and a DLL Hijack☆334May 3, 2020Updated 6 years ago
- SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API.☆109Jan 20, 2021Updated 5 years ago
- Process Injection☆764Oct 24, 2021Updated 5 years ago
- Proper Payload Protection Prevents Poor Performance☆76Jul 27, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PoC of a VBA macro spawning a process with a spoofed parent and command line.☆380Apr 28, 2020Updated 6 years ago
- A library for integrating communication channels with the Cobalt Strike External C2 server☆290Nov 23, 2017Updated 8 years ago
- In motherland, target network calls you!☆59Sep 4, 2018Updated 8 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- ☆229May 10, 2018Updated 8 years ago
- Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…☆93Apr 27, 2019Updated 7 years ago
- CobaltStrike External C2 for Websockets☆195Jul 16, 2019Updated 7 years ago