A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models
☆37Oct 14, 2026Updated this week
Alternatives and similar repositories for BinarySoap
Users that are interested in BinarySoap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆23Aug 20, 2026Updated last month
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆23Sep 20, 2026Updated 3 weeks ago
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆28Sep 3, 2026Updated last month
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆57Aug 26, 2026Updated last month
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated last month
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- PIC shellcode agent based on Stardust framework and Crystal Palace☆92Oct 4, 2026Updated 2 weeks ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated 3 weeks ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆146Aug 20, 2026Updated last month
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 3 months ago
- RISC-V VM based shellcode loader PoC - Still WIP☆38Aug 1, 2026Updated 2 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆109Oct 11, 2026Updated last week
- Intel.AES-NI: Leveraging Intel AES-NI for AES-128 & AES-256 Encryption Modes☆27Jun 10, 2025Updated last year
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆47Jun 18, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆37May 19, 2026Updated 4 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆255Sep 29, 2026Updated 2 weeks ago
- ☆16Jan 15, 2026Updated 9 months ago
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆25Oct 8, 2026Updated last week
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- File hosting and scripted web delivery service extender for AdaptixC2. Host files over HTTP/HTTPS, generate one-liner payloads across 17 …☆36Aug 24, 2026Updated last month
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆81Sep 18, 2026Updated last month
- Rust based C2 Framework☆32Sep 29, 2026Updated 2 weeks ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆144Oct 4, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of techniques for process injection on Windows☆104Aug 16, 2026Updated 2 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- Malware as a Service Ludus Range☆129Sep 24, 2026Updated 3 weeks ago
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆136Oct 7, 2026Updated last week
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated last week
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated 2 months ago
- Implementation of hello world in windows, focusing on binary size and malleability of windows binaries☆18Jul 3, 2025Updated last year
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆87Jul 20, 2026Updated 2 months ago
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- One-header configurable C++20 COFF loader☆20Jul 21, 2025Updated last year
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- ☆49Oct 4, 2026Updated 2 weeks ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆49Jan 25, 2025Updated last year
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Check if your AV/EDR does inline hooking, displays the hooked functions and allows you to compare them with the original ones.☆44Apr 2, 2026Updated 6 months ago