Alternatives and similar repositories for DarkFinger-C2

Users that are interested in DarkFinger-C2 are comparing it to the libraries listed below

• xRET2pwn / PickleC2
  PickleC2 is a post-exploitation and lateral movements framework
  ☆96Updated 3 years ago
• snovvcrash / OffensivePipeline
  OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
  ☆91Updated 3 years ago
• xforcered / Detect-Hooks
  Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
  ☆101Updated 3 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆115Updated 3 years ago
• thiagomayllart / Harvis
  Harvis is designed to automate your C2 Infrastructure.
  ☆108Updated 2 years ago
• mobdk / WinBoost
  Execute Mimikatz with different technique
  ☆51Updated 3 years ago
• Barbarisch / forkatz
  credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege
  ☆124Updated 4 years ago
• VirtualAlllocEx / Taskschedule-Persistence-Download-Cradles
  Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged
  ☆86Updated 2 years ago
• S3cur3Th1sSh1t / SharpOxidResolver
  IOXIDResolver from AirBus Security/PingCastle
  ☆51Updated 4 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆144Updated 4 years ago
• cham423 / cs-tools
  cobalt strike tools
  ☆31Updated 3 years ago
• rvrsh3ll / SharpSMBSpray
  Spray a hash via smb to check for local administrator access
  ☆143Updated 4 years ago
• rvrsh3ll / NoMSBuild
  MSBuild without MSbuild.exe
  ☆132Updated 4 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆136Updated 4 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆97Updated 2 years ago
• foofus-sph1nx / PyMailSniper
  Python port of MailSniper to exfiltrate emails via EWS endpoint
  ☆88Updated 3 years ago
• RiccardoAncarani / TaskShell
  ☆57Updated 4 years ago
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆110Updated 3 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆144Updated 3 years ago
• aaaddress1 / xlsGen
  (PoC) Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in xls files without Excel.
  ☆43Updated 3 years ago
• ahmedkhlief / muddyc3-Revived
  ☆38Updated 5 years ago
• ly4k / Pypykatz
  Modified version of Pypykatz to print encrypted credentials
  ☆51Updated 2 years ago
• BC-SECURITY / SocksProxyServer-Plugin
  Socks Proxy Server Plugin for Invoke-SocksProxy
  ☆17Updated 3 months ago
• ricardojba / Invoke-noPac
  .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac
  ☆62Updated 2 years ago
• LuxNoBulIshit / Smug_Fu3k
  ☆53Updated 3 years ago
• EncodeGroup / AggressiveGadgetToJScript
  A Cobalt Strike Aggressor script to generate GadgetToJScript payloads
  ☆102Updated 4 years ago
• jfmaes / SharpLNKGen-UI
  UI for creating LNKs
  ☆104Updated 4 years ago
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆56Updated 3 years ago
• S3cur3Th1sSh1t / Get-System-Techniques
  ☆95Updated 3 years ago