Alternatives and similar repositories for C2Core

Users that are interested in C2Core are comparing it to the libraries listed below

• maxDcb / C2Implant
  Windows C++ Implant for Exploration C2
  ☆45Updated this week
• kyxiaxiang / AV_EDR_EPP_Notes
  ☆62Updated last year
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆53Updated last year
• fern89 / C2
  A basic C2 framework written in C
  ☆60Updated last year
• entropy-z / PostEx-Arsenal
  Arsenal of modules to beacon postex
  ☆94Updated 2 months ago
• ANYLNK / NSecSoftBYOVD
  NSecSoftBYOVD POC
  ☆53Updated 4 months ago
• oldboy21 / SyscallMeMaybe
  Implementation of Indirect Syscall technique to pop a calc.exe
  ☆113Updated 2 years ago
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆66Updated 2 years ago
• internetangel / ZeroCrumb
  Dumping App Bound Protected Credentials & Cookies Without Privileges.
  ☆166Updated 8 months ago
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆75Updated 3 years ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆139Updated last year
• SaadAhla / D1rkSleep
  Improved version of EKKO by @5pider that Encrypts only Image Sections
  ☆125Updated 2 years ago
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆46Updated 2 years ago
• EvilBytecode / IDontLikeFileLocks
  Title is self explaining, well theres few methods we can do to read locked file and play with it...
  ☆83Updated 3 weeks ago
• outflanknl / nix_bof_template
  Beacon Object File (BOF) Template
  ☆61Updated last year
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆116Updated last year
• wolfcod / beacondbg
  Beacon Debugger
  ☆55Updated last year
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆64Updated 2 years ago
• Hagrid29 / BOF-DCOMPotato-PrintNotify
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆96Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆49Updated 2 years ago
• EvilBytecode / Nyx-Full-Dll-Unhook
  (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.
  ☆50Updated 8 months ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆36Updated 4 years ago
• TwoSevenOneT / DefenderWrite
  A tool that supports finding and abusing whitelisted programs to allow arbitrary file writing into the executable folder of Antivirus sof…
  ☆80Updated 3 months ago
• NtDallas / BOF_RunPe
  BOF to run PE in Cobalt Strike Beacon without console creation
  ☆177Updated 2 months ago
• maliciousgroup / RDI-SRDI
  This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".
  ☆85Updated 2 years ago
• ph3n1x007 / EarlyBirdNTDLL
  ☆37Updated 2 years ago
• ryanq47 / CS-EXTC2-ICMP
  An ICMP channel for Beacons, implemented using Cobalt Strike’s External C2 framework.
  ☆109Updated 3 months ago
• dobin / ShellcodeObfuscationLab
  Test bench lab for Shellcode Obfuscation
  ☆33Updated 4 months ago
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆44Updated 3 years ago
• xalicex / LOLDrivers_finder
  ☆89Updated 2 years ago