Old JXA based MacOS persistency for EDR bypass security testing
☆34Jul 18, 2026Updated 3 months ago
Alternatives and similar repositories for JXA-Persistency
Users that are interested in JXA-Persistency are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- ☆24Sep 12, 2026Updated last month
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆40Sep 20, 2026Updated 3 weeks ago
- DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)☆26Mar 11, 2020Updated 6 years ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆86Aug 1, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.☆55Aug 24, 2026Updated last month
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Use TCP Doublespeak to turn every service into a backdoor. Run commands via raw TCP/UDP frames through firewalls. All-in-one C binary.☆55Sep 8, 2026Updated last month
- AWS S3 User-Defined C2☆25Oct 6, 2026Updated last week
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆83Sep 18, 2026Updated last month
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 3 months ago
- Library for decompiling multi-architecture disassembly (ARM64, X86, X86-64) into source code (C, Zig, Python)☆51Jun 8, 2025Updated last year
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vu…☆35Oct 10, 2026Updated last week
- ☆19Oct 28, 2025Updated 11 months ago
- another PrivEsc potato...☆121Sep 5, 2026Updated last month
- ☆58Apr 17, 2026Updated 6 months ago
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 3 months ago
- SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspectin…☆87Aug 9, 2026Updated 2 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆110Oct 11, 2026Updated last week
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated last week
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Find and fix OPSEC leaks in your PE files before defenders do☆46Jul 22, 2026Updated 2 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.☆34Sep 24, 2026Updated 3 weeks ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆43Sep 9, 2026Updated last month
- Repository for various Beacon Object Files (BOFs)☆122Updated this week
- AD ACL Abuser for Havoc C2☆25Mar 30, 2026Updated 6 months ago
- ☆47Feb 11, 2023Updated 3 years ago
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 6 months ago
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Jun 15, 2026Updated 4 months ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- ☆48Dec 28, 2025Updated 9 months ago
- Undetectable offensive toolkit inside Chrome☆146Aug 27, 2026Updated last month
- Misery Loader to bypass modern EDR solutions☆19Dec 20, 2024Updated last year
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆62Jul 22, 2026Updated 2 months ago