GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or Microsoft SharePoint Document.
☆661Jun 24, 2026Updated 4 months ago
Alternatives and similar repositories for GC2-sheet
Users that are interested in GC2-sheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,427Oct 27, 2023Updated 3 years ago
- The swiss army knife of LSASS dumping☆2,143Sep 17, 2024Updated 2 years ago
- Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.☆844Jul 2, 2024Updated 2 years ago
- Google Drive, OneDrive and Youtube as covert-channels - Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or…☆72Oct 31, 2021Updated 5 years ago
- A C# Command & Control framework☆1,026Mar 28, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,202Oct 16, 2023Updated 3 years ago
- C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.☆1,126Apr 13, 2026Updated 6 months ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,888Aug 18, 2023Updated 3 years ago
- A collaborative, multi-platform, red teaming framework☆4,883Oct 17, 2026Updated 2 weeks ago
- A light-weight first-stage C2 implant written in Nim (and Rust).☆957Mar 2, 2026Updated 8 months ago
- ☆1,856Aug 30, 2024Updated 2 years ago
- Template-Driven AV/EDR Evasion Framework☆1,836Nov 3, 2023Updated 3 years ago
- A tool to kill antimalware protected processes☆1,531Jun 19, 2021Updated 5 years ago
- The Havoc Framework☆8,498Dec 18, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.☆1,575Aug 20, 2024Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆1,439Nov 22, 2023Updated 2 years ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,514Dec 21, 2023Updated 2 years ago
- evilginx3 + gophish☆2,040Jun 15, 2024Updated 2 years ago
- Kill AV/EDR leveraging BYOVD attack☆407Jul 11, 2023Updated 3 years ago
- Open source pre-operation C2 server based on python and powershell☆766Jul 6, 2021Updated 5 years ago
- Run Powershell without software restrictions.☆282Sep 8, 2021Updated 5 years ago
- XLL Phishing Tradecraft☆438May 24, 2022Updated 4 years ago
- SysWhispers on Steroids - AV/EDR evasion via direct system calls.☆1,675Jul 31, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,789Jan 16, 2026Updated 9 months ago
- SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.☆1,227Sep 29, 2026Updated last month
- Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic☆212Oct 21, 2026Updated last week
- Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs☆1,233Aug 18, 2023Updated 3 years ago
- A C2 post-exploitation framework☆486Jan 24, 2024Updated 2 years ago
- Ask a TGS on behalf of another user without password☆479Mar 30, 2025Updated last year
- HVNC for Cobalt Strike☆1,351Dec 7, 2023Updated 2 years ago
- Terminate AV/EDR Processes using kernel driver☆354Jun 12, 2023Updated 3 years ago
- Adversary Emulation Framework☆12,219Oct 26, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Spartacus DLL/COM Hijacking Toolkit☆1,085Feb 1, 2024Updated 2 years ago
- Dump cookies and credentials directly from Chrome/Edge process memory☆1,503Apr 9, 2026Updated 6 months ago
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆631Jan 20, 2026Updated 9 months ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- C2 infrastructure over Microsoft Teams.☆760Jan 15, 2025Updated last year
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆2,207Nov 28, 2024Updated last year
- WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement☆372Dec 24, 2021Updated 4 years ago