JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and maintain persistence. Browser extension, electron app, and node/bun app implants are included.
☆485Jul 9, 2026Updated 3 months ago
Alternatives and similar repositories for JS-Tap
Users that are interested in JS-Tap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ↕️🤫 Stealth redirector for your red team operation security☆1,120Jul 20, 2026Updated 3 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆482Aug 2, 2024Updated 2 years ago
- ☆569Mar 28, 2024Updated 2 years ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,914Nov 3, 2024Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆582Jun 5, 2023Updated 3 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- An App Domain Manager Injection DLL PoC on steroids☆242Dec 14, 2023Updated 2 years ago
- Spartacus DLL/COM Hijacking Toolkit☆1,085Feb 1, 2024Updated 2 years ago
- A BOF that runs unmanaged PEs inline☆705Oct 23, 2024Updated 2 years ago
- .NET assembly loader with patchless AMSI and ETW bypass☆393Apr 19, 2023Updated 3 years ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆364Nov 19, 2024Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.☆461Dec 21, 2023Updated 2 years ago
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆229Nov 23, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Chrome browser extension-based Command & Control☆271Mar 18, 2026Updated 7 months ago
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆631Jan 20, 2026Updated 9 months ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,202Oct 16, 2023Updated 3 years ago
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆315Dec 9, 2023Updated 2 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,427Oct 27, 2023Updated 3 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,033Jun 4, 2024Updated 2 years ago
- Collection of UAC Bypass Techniques Weaponized as BOFs☆666Feb 21, 2024Updated 2 years ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆607Mar 19, 2024Updated 2 years ago
- Load a dynamic library from memory by modifying the native Windows loader☆311May 5, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Terminate AV/EDR Processes using kernel driver☆354Jun 12, 2023Updated 3 years ago
- Ghosting-AMSI☆251Apr 24, 2025Updated last year
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆642Jan 2, 2025Updated last year
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,301Mar 19, 2025Updated last year
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆384Aug 28, 2026Updated 2 months ago
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆76Feb 9, 2024Updated 2 years ago
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆285Feb 24, 2025Updated last year
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆898Feb 3, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- C or BOF file to extract WebKit master key to decrypt user cookie☆211Apr 29, 2024Updated 2 years ago
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,413Mar 9, 2026Updated 7 months ago
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- Dump cookies and credentials directly from Chrome/Edge process memory☆1,503Apr 9, 2026Updated 6 months ago
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆638Jun 25, 2024Updated 2 years ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆250Jun 11, 2024Updated 2 years ago
- Remote operations commands implemented using Beacon Object Files☆1,197Oct 17, 2026Updated 2 weeks ago