Collection of links on bad opsec
☆519May 31, 2024Updated 2 years ago
Alternatives and similar repositories for bad-opsec
Users that are interested in bad-opsec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Modified version of PEAS client for offensive operations☆50May 18, 2026Updated 5 months ago
- Generate backdoored RSA keys using SETUP☆239Dec 1, 2025Updated 11 months ago
- It’s an OSINT reconnaissance poc powered by Local LLMs (Ollama). You can feed it an email, domain, or IP, and it automatically performs m…☆85Nov 20, 2025Updated 11 months ago
- Commandline spoofing on Windows☆99Jul 19, 2026Updated 3 months ago
- Dynamic shellcode loader with sophisticated evasion capabilities☆345Oct 1, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆574Oct 3, 2025Updated last year
- New 0 day vulnerability allowing to leak NTLM hashes from browsers with one click☆208Nov 18, 2025Updated 11 months ago
- Exposing CharmingKitten's malicious activity for IRGC-IO Counterintelligence division (1500)☆434Oct 27, 2025Updated last year
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 10 months ago
- ↕️🤫 Stealth redirector for your red team operation security☆1,120Jul 20, 2026Updated 3 months ago
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- ☆110Feb 14, 2026Updated 8 months ago
- Lockbit, URSIF, BlackBasta etc.☆241Jun 4, 2026Updated 4 months ago
- Windows protocol library, including SMB and RPC implementations, among others.☆846Oct 5, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆61Dec 10, 2025Updated 10 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- AppLocker-Based EDR Neutralization☆350Dec 19, 2025Updated 10 months ago
- SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…☆454Nov 3, 2025Updated last year
- The Mimikatz Missing Manual☆467Feb 5, 2026Updated 8 months ago
- Using Chromium-based browsers as a proxy for C2 traffic.☆155Dec 6, 2025Updated 10 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆35Mar 14, 2026Updated 7 months ago
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆167Nov 28, 2025Updated 11 months ago
- Here you find the complete list of enrichments and extractionsfor Ubikron.☆40Mar 6, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆407Oct 23, 2026Updated last week
- PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads☆256Oct 30, 2025Updated last year
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,561May 5, 2026Updated 5 months ago
- This cheatsheet maps common impacket workflows to their modern alternatives☆308May 30, 2026Updated 5 months ago
- This map lists the essential techniques to bypass anti-virus and EDR☆3,482Mar 28, 2025Updated last year
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆501Oct 26, 2026Updated last week
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 4 months ago
- ☆38Sep 8, 2026Updated last month
- Execute shellcode via ASPNET compiler☆61Oct 2, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/S…☆210May 5, 2026Updated 5 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆163Jul 15, 2026Updated 3 months ago
- Deserialization payload generator for a variety of .NET formatters☆244Oct 21, 2026Updated last week
- BYOVD: Use 360 WFP driver to block EDR/XDR network connection.☆132Feb 10, 2026Updated 8 months ago
- Windows Session Hijacking via COM☆352Dec 13, 2025Updated 10 months ago
- Proof of concept for Kerberos Armoring abuse.☆86Dec 12, 2025Updated 10 months ago
- Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and …☆536Oct 24, 2026Updated last week