Alternatives and similar repositories for REC2

Users that are interested in REC2 are comparing it to the libraries listed below

• decoder-it / TokenStealer
  ☆164Updated last year
• BlackSnufkin / NovaLdr
  Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
  ☆246Updated last year
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆132Updated 11 months ago
• brosck / Reaper
  「💀」Proof of concept on BYOVD attack
  ☆161Updated 7 months ago
• BlWasp / rs-shell
  A dirty PoC for a reverse shell with cool features in Rust
  ☆182Updated 10 months ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• SaadAhla / DocPlz
  Documents Exfiltration project for fun and educational purposes
  ☆145Updated last year
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆147Updated last year
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆140Updated last year
• BlackSnufkin / GhostDriver
  yet another AV killer tool using BYOVD
  ☆292Updated last year
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆205Updated last year
• trevorsaudi / Mshikaki
  A shellcode injection tool showcasing various process injection techniques
  ☆137Updated last year
• trickster0 / NamelessC2
  Nameless C2 - A C2 with all its components written in Rust
  ☆268Updated 9 months ago
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆138Updated last month
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆222Updated last year
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆165Updated last year
• WKL-Sec / WMIExec
  Set of python scripts which perform different ways of command execution via WMI protocol.
  ☆160Updated 2 years ago
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆126Updated 5 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆168Updated 4 months ago
• Tylous / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆188Updated 10 months ago
• BlackSnufkin / NyxInvoke
  NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…
  ☆222Updated 5 months ago
• gatariee / Winton
  Command and Control (C2) framework
  ☆127Updated 2 months ago
• Zerx0r / dvenom
  🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.
  ☆157Updated last year
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆140Updated 3 months ago
• 0xTriboulet / Red_Team_Code_Snippets
  random code snippets, useful for getting started
  ☆121Updated 8 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆203Updated 8 months ago
• dmcxblue / SharpBlackout
  Terminate AV/EDR leveraging BYOVD attack
  ☆88Updated 3 months ago
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆132Updated 8 months ago
• Mr-Un1k0d3r / Cookie-and-Handle-Stealer
  C or BOF file to extract WebKit master key to decrypt user cookie
  ☆202Updated last year
• CodeXTF2 / WindowSpy
  WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.
  ☆278Updated 4 months ago