Alternatives and similar repositories for XMT

Users that are interested in XMT are comparing it to the libraries listed below

• D00Movenok / goMalleable
  🔎🪲 Malleable C2 profiles parser and assembler written in golang
  ☆65Updated last year
• ariary / QueenSono
  Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)
  ☆166Updated 4 years ago
• ariary / fileless-xec
  Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,.…
  ☆204Updated last year
• Ne0nd0g / go-clr
  A PoC package for hosting the CLR and executing .NET from Go
  ☆77Updated last year
• iDigitalFlame / ThunderStorm
  Golang C2 Server and Agents using XMT (https://github.com/iDigitalFlame/xmt)
  ☆40Updated 3 weeks ago
• adamsvoboda / nim-loader
  WIP shellcode loader in nim with EDR evasion techniques
  ☆221Updated 3 years ago
• neox41 / go-procinject
  Process Injection Techniques with Golang
  ☆80Updated 5 years ago
• Enelg52 / KittyStager
  KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this p…
  ☆228Updated 2 years ago
• zaneGittins / go-inject
  Process injection techniques written in Go.
  ☆64Updated 2 years ago
• kensh1ro / Willie-C2
  A Golang implant that uses Discord as a C2 team server
  ☆65Updated last year
• CodeXTF2 / cobaltstrike-headless
  Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.
  ☆147Updated 3 years ago
• ayoul3 / reflect-pe
  Reflectively load PE
  ☆105Updated 5 years ago
• HavocFramework / Talon
  (Demo) 3rd party agent for Havoc
  ☆146Updated 2 years ago
• t3hbb / NSGenCS
  Extendable payload obfuscation and delivery framework
  ☆145Updated 3 years ago
• iammaguire / Gotato
  Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.
  ☆115Updated 4 years ago
• trustedsec / SliverKeylogger
  ☆168Updated 2 years ago
• timwhitez / Doge-Process-Injection
  Demo of process injection, using Nt, direct syscall, etc.
  ☆28Updated 4 years ago
• MultSec / MultCheck
  Identifies bad bytes from static analysis with any Anti-Virus scanner.
  ☆128Updated last year
• Cerbersec / KillDefenderBOF
  Beacon Object File PoC implementation of KillDefender
  ☆238Updated 3 years ago
• Sh0ckFR / Lockbit3.0-MpClient-Defender-PoC
  Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC
  ☆177Updated 3 years ago
• malware-unicorn / GoPEInjection
  Golang PE injection on windows
  ☆170Updated 4 years ago
• Ne0nd0g / merlin-agent-dll
  ☆54Updated 8 months ago
• aus / gopherheaven
  Go implementation of the Heaven's Gate technique
  ☆101Updated 4 years ago
• nopbrick / SeeProxy
  Golang reverse proxy with CobaltStrike malleable profile validation.
  ☆110Updated 2 years ago
• moloch-- / denim
  Automated compiler obfuscation for nim
  ☆140Updated 3 years ago
• Acebond / ReverseSocks5
  Single executable reverse SOCKS5 proxy written in Golang.
  ☆145Updated 2 months ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆144Updated 3 years ago
• kindtime / nosferatu
  Windows NTLM Authentication Backdoor
  ☆241Updated 11 months ago
• f1zm0 / acheron
  indirect syscalls for AV/EDR evasion in Go assembly
  ☆346Updated 2 years ago
• An00bRektn / gopher47
  A third-party Gopher Assassin for the Havoc Framework.
  ☆44Updated 2 years ago