Alternatives and similar repositories for imaginaryC2

Users that are interested in imaginaryC2 are comparing it to the libraries listed below

• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆469Updated 4 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆287Updated 7 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆428Updated 6 years ago
• silence-is-best / c2db
  c2 traffic
  ☆189Updated 2 years ago
• WithSecureLabs / snake
  snake - a malware storage zoo
  ☆216Updated last year
• two06 / Inception
  Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  ☆370Updated last year
• misterch0c / what_is_this_c2
  For all these times you're asking yourself "what is this panel again?"
  ☆255Updated 2 years ago
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆382Updated 5 years ago
• k-vitali / Malware-Misc-RE
  Miscellaneous Malware RE
  ☆196Updated 3 years ago
• mandiant / DueDLLigence
  ☆473Updated 2 years ago
• misterch0c / APT34
  APT34/OILRIG leak
  ☆231Updated 6 years ago
• pwndizzle / CodeExecutionOnWindows
  A list of ways to execute code on Windows using legitimate Windows tools
  ☆307Updated 6 years ago
• p3nt4 / Nuages
  A modular C2 framework
  ☆476Updated 2 months ago
• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆320Updated 8 years ago
• ewhitehats / InvisiblePersistence
  Persisting in the Windows registry "invisibly"
  ☆341Updated 6 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆221Updated 4 years ago
• netspooky / inhale
  A malware analysis and classification tool.
  ☆190Updated 3 years ago
• JPCERTCC / MalConfScan
  Volatility plugin for extracts configuration data of known malware
  ☆489Updated last year
• StrangerealIntel / DailyIOC
  IOC from articles, tweets for archives
  ☆313Updated last year
• beahunt3r / Windows-Hunting
  ☆350Updated 4 years ago
• bats3c / Ghost-In-The-Logs
  Evade sysmon and windows event logging
  ☆623Updated 5 years ago
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆376Updated 3 years ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆424Updated 4 years ago
• Ziconius / FudgeC2
  FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
  ☆254Updated 2 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆211Updated 3 months ago
• matterpreter / Shhmon
  Neutering Sysmon via driver unload
  ☆230Updated 2 years ago
• christophetd / spoofing-office-macro
  PoC of a VBA macro spawning a process with a spoofed parent and command line.
  ☆380Updated 5 years ago
• hoangprod / AndrewSpecial
  AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
  ☆390Updated 6 years ago
• StrangerealIntel / CyberThreatIntel
  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
  ☆708Updated 2 years ago
• mandiant / OfficePurge
  ☆260Updated 2 years ago