Alternatives and similar repositories for Red-EC2:

Users that are interested in Red-EC2 are comparing it to the libraries listed below

• JoshSchwarz / Bloodhound-Cypher
  BH Cypher Queries picked up from random places
  ☆38Updated 6 years ago
• dsnezhkov / TruffleSnout
  Iterative AD discovery toolkit for offensive operations
  ☆86Updated 5 years ago
• curi0usJack / ansible-redelk
  Ansible playbooks for instrumenting a Red Team environment with RedElk
  ☆47Updated 4 years ago
• chryzsh / JenkinsPasswordSpray
  A tool to password spray Jenkins instances
  ☆56Updated 5 years ago
• RiccardoAncarani / bloodhound-playbook
  Reproducible and extensible BloodHound playbooks
  ☆42Updated 5 years ago
• fozavci / TradecraftDevelopment-Fundamentals
  Tradecraft Development Fundamentals
  ☆40Updated 3 years ago
• sensepost / thumbscr-ews
  Exchangelib wrapper for pentesting
  ☆59Updated last month
• ThunderGunExpress / Thunder_Woosus
  ☆39Updated 6 years ago
• xan7r / Misc
  ☆45Updated 3 years ago
• RedSiege / FunctionalC2
  A small POC of using Azure Functions to relay communications. Feel free to add additional functionality beyond this POC!
  ☆73Updated last year
• mitchmoser / AtYourService
  Service Enumeration C# .NET Assembly
  ☆60Updated 3 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆105Updated 4 years ago
• jfmaes / Ansible-Cobalt-Strike
  An Ansible role to install cobalt-strike
  ☆16Updated 4 years ago
• djhohnstein / ScatterBrain
  Suite of Shellcode Running Utilities
  ☆108Updated 5 years ago
• chryzsh / ansible-role-cobalt-strike
  Ansible role to install Cobalt Strike and optionally configure as Teamserver
  ☆32Updated 4 years ago
• aahmad097 / ZoomPersistence
  Zoom Persistence Aggressor and Handler
  ☆54Updated 3 years ago
• vysecurity / AzureAppC2
  A script that can be deployed to Azure App for C2 / Proxy / Redirector
  ☆36Updated 5 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• sussurro / BetterTorch
  A more obfuscated CactusTorch targeted towards office
  ☆32Updated 4 years ago
• rvrsh3ll / FlaskRedirectorProtector
  Protect your servers with a secret header
  ☆29Updated 4 years ago
• djhohnstein / TSMSISrv_poc
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆57Updated 5 years ago
• xenoscr / Useful-BloodHound-Queries
  A collection of Neo4j/BloodHound queries to collect interesting information.
  ☆45Updated 2 years ago
• mantvydasb / Invoke-PowerCloud
  Deliver powershell paylods via DNS TXT via CloudFlare using PowerShell
  ☆60Updated 6 years ago
• kafkaesqu3 / SharpStomp
  Timestomping module: overwrite file create/modify times in .NET (no pinvoke)
  ☆24Updated 3 years ago
• S3cur3Th1sSh1t / SharpOxidResolver
  IOXIDResolver from AirBus Security/PingCastle
  ☆47Updated 4 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆22Updated 4 years ago
• mdsecactivebreach / RegistryStrikesBack
  ☆52Updated 4 years ago
• dtrizna / DotNetInject
  Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.
  ☆37Updated 5 years ago
• jnqpblc / SharpSvc
  SharpSvc is a simple code set to interact with the SC Manager API and is compatible with Cobalt Strike.
  ☆25Updated last year
• checkymander / Forerunner
  Automation Engine using the Covenant API and lua scripting
  ☆24Updated 2 years ago