Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsfree.com and 52.241.248.38. Uses .NET evasion techniques (DisableNativeImageLoad), file system manipulation (DeleteFile, WriteFile, ReadFile), and startup VBScript persistence.
☆17Sep 21, 2026Updated 3 weeks ago
Alternatives and similar repositories for PureRAT-msbuild.exe--C2-Extraction--Net-Evasion-Analysis
Users that are interested in PureRAT-msbuild.exe--C2-Extraction--Net-Evasion-Analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rust based C2 Framework☆33Sep 29, 2026Updated 2 weeks ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆28Updated this week
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆23Sep 20, 2026Updated 3 weeks ago
- SVG Steganography toolkit☆16Jun 18, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆37Sep 6, 2026Updated last month
- ☆22Jun 28, 2026Updated 3 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆108Oct 1, 2026Updated 2 weeks ago
- ☆56Sep 18, 2026Updated last month
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆256Sep 29, 2026Updated 2 weeks ago
- An AI CTF challenges to learn some of the risks that AI Chatbots pose☆77Sep 20, 2026Updated 3 weeks ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆54Sep 25, 2026Updated 3 weeks ago
- AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assess…☆65Updated this week
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆37Oct 7, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 1, 2026Updated 2 weeks ago
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆83Sep 10, 2026Updated last month
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆20Oct 2, 2026Updated 2 weeks ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆145Oct 4, 2026Updated 2 weeks ago
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆25Oct 8, 2026Updated last week
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆41Oct 1, 2026Updated 2 weeks ago
- A collection of techniques for process injection on Windows☆104Aug 16, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- sharing some outputs for science☆24Sep 26, 2026Updated 3 weeks ago
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.☆131Oct 6, 2026Updated last week
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆83Sep 18, 2026Updated last month
- Some bugs found via binary instrumentation and fuzzing☆26Sep 16, 2026Updated last month
- Undetectable offensive toolkit inside Chrome☆146Aug 27, 2026Updated last month
- Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONT…☆53Updated this week
- a lightweight, fast, and fully portable reimplementation of Impacket in TypeScript and JavaScript.☆28Sep 2, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-85884 POC☆34Updated this week
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Sep 28, 2026Updated 3 weeks ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated 3 weeks ago
- ☆39Sep 8, 2026Updated last month
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆65Oct 7, 2026Updated last week
- 🥢 agent skills for microsandbox☆23Oct 12, 2026Updated last week