Alternatives and similar repositories for XMT:

Users that are interested in XMT are comparing it to the libraries listed below

• D00Movenok / goMalleable
  🔎🪲 Malleable C2 profiles parser and assembler written in golang
  ☆65Updated 11 months ago
• iDigitalFlame / ThunderStorm
  Golang C2 Server and Agents using XMT (https://github.com/iDigitalFlame/xmt)
  ☆34Updated 5 months ago
• ariary / QueenSono
  Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)
  ☆146Updated 3 years ago
• zaneGittins / go-inject
  Process injection techniques written in Go.
  ☆62Updated last year
• neox41 / go-procinject
  Process Injection Techniques with Golang
  ☆77Updated 4 years ago
• Jhangju / goLang-injectors
  This project will guide yout to awareness of injection in almost every window API and process.
  ☆25Updated 3 years ago
• adamsvoboda / nim-loader
  WIP shellcode loader in nim with EDR evasion techniques
  ☆216Updated 3 years ago
• CodeXTF2 / PyHmmm
  Simple PoC Python agent to showcase Havoc C2's custom agent interface. Not operationally safe or stable. Released with accompanying blog …
  ☆80Updated last year
• MultSec / MultCheck
  Identifies bad bytes from static analysis with any Anti-Virus scanner.
  ☆124Updated 10 months ago
• f1zm0 / acheron
  indirect syscalls for AV/EDR evasion in Go assembly
  ☆326Updated last year
• Tylous / Mangle
  Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
  ☆79Updated 2 years ago
• CodeXTF2 / cobaltstrike-headless
  Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.
  ☆149Updated 2 years ago
• Ne0nd0g / go-clr
  A PoC package for hosting the CLR and executing .NET from Go
  ☆73Updated 9 months ago
• iammaguire / Gotato
  Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.
  ☆112Updated 3 years ago
• ariary / fileless-xec
  Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,.…
  ☆198Updated 10 months ago
• ayoul3 / reflect-pe
  Reflectively load PE
  ☆103Updated 4 years ago
• Ne0nd0g / merlin-agent
  Post-exploitation agent for Merlin
  ☆194Updated 3 weeks ago
• nettitude / ShellcodeMutator
  ☆248Updated 2 years ago
• malware-unicorn / GoPEInjection
  Golang PE injection on windows
  ☆167Updated 3 years ago
• Cobalt-Strike / sleep_python_bridge
  This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python withou…
  ☆184Updated 2 years ago
• HavocFramework / Talon
  (Demo) 3rd party agent for Havoc
  ☆139Updated last year
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆91Updated last year
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆108Updated last year
• Enelg52 / KittyStager
  KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this p…
  ☆221Updated last year
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆138Updated 3 years ago
• praetorian-inc / goffloader
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆218Updated 2 months ago
• aus / gopherheaven
  Go implementation of the Heaven's Gate technique
  ☆98Updated 4 years ago
• SaadAhla / PSpersist
  Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell pro…
  ☆85Updated last year
• eladshamir / RPC-Backdoor
  A basic emulation of an "RPC Backdoor"
  ☆240Updated 2 years ago
• dobin / antnium
  A C2 framework for initial access in Go
  ☆180Updated 2 years ago