In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit
☆19Apr 14, 2026Updated 6 months ago
Alternatives and similar repositories for WerWolf
Users that are interested in WerWolf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- One PsExec client to rule them all☆15Mar 25, 2026Updated 7 months ago
- ☆17Sep 21, 2026Updated last month
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆89Oct 10, 2026Updated 2 weeks ago
- A litterbox integration for the Mythic Command and Control Server☆20Sep 14, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX…☆22Dec 23, 2025Updated 10 months ago
- ☆22Jun 28, 2026Updated 3 months ago
- Evasion kit for Cobalt Strike☆16Aug 13, 2026Updated 2 months ago
- SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled…☆89Aug 29, 2026Updated last month
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆64May 4, 2026Updated 5 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆21Oct 4, 2026Updated 3 weeks ago
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆28Apr 20, 2026Updated 6 months ago
- PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping☆39May 12, 2026Updated 5 months ago
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆45Mar 24, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for developmen…☆27Jul 23, 2026Updated 3 months ago
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 7 months ago
- Safe Harbor is a BOF that streamlines process reconnaissance for red team operations by identifying trusted, low-noise targets to maintai…☆81Oct 27, 2025Updated 11 months ago
- Repository hosting a hypothetical EDR Spoofer, as discovered originally by Nightmare-Eclipse☆44May 27, 2026Updated 4 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆141Aug 13, 2026Updated 2 months ago
- Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that …☆21Oct 2, 2026Updated 3 weeks ago
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated last month
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- dcsync bof☆53Feb 13, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 6 months ago
- Local Windows credential extraction☆25Jul 14, 2026Updated 3 months ago
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆96Jun 24, 2026Updated 4 months ago
- A modern alternative Web-UI for the Mythic Command and Control Server☆83Jul 3, 2026Updated 3 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆94Sep 16, 2026Updated last month
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆35Oct 12, 2026Updated last week
- Rust Armory - Cobalt Strike Beacon Object Files (BOFs) in Rust for situational awareness, remote operations, and post-exploitation tradec…☆73Sep 17, 2026Updated last month
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- Adaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.☆70May 4, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 3 months ago
- DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack …☆28Oct 1, 2026Updated 3 weeks ago
- ☆18Sep 1, 2025Updated last year
- Evasive shellcode loader for Red Teaming☆20Aug 15, 2025Updated last year
- Browse, search and audit AD Explorer snapshots offline in your browser: decoded attributes, LDAP filters, and reports for what BloodHound…☆40Sep 12, 2026Updated last month
- Tyche is a Mythic HTTPX Profile Generator used to create Malleable C2 Profiles.☆59Mar 28, 2026Updated 6 months ago
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆12Jul 30, 2026Updated 2 months ago