Windows C++ Implant for Exploration C2
☆50Oct 29, 2026Updated this week
Alternatives and similar repositories for C2Implant
Users that are interested in C2Implant are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux C++ Implant for Exploration C2☆19Updated this week
- Core C++ library for C2 architecture, message handling, and security tooling experiments.☆24Updated this week
- TeamServer and Client of Exploration Command and Control Framework☆201Updated this week
- Create a Shellcode Injector, using indirect syscal, from any Windows Module☆11Oct 3, 2025Updated last year
- HardwareTurningPoint, Fully Go Compatible Hardware Breakpoint☆16Jan 30, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Create a Shellcode Dropper from any Windows Module☆11Apr 27, 2026Updated 6 months ago
- Shaco is a linux agent for havoc☆164Oct 25, 2023Updated 3 years ago
- ☆108Jan 21, 2025Updated last year
- modified mssqlclient from impacket to extract policies from the SCCM database☆52Feb 24, 2026Updated 8 months ago
- 看起来叫BabyBypass，实际啥都会记一些☆15Sep 10, 2023Updated 3 years ago
- ☆52Jun 12, 2026Updated 4 months ago
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆337Mar 6, 2025Updated last year
- stack spoofing☆16Nov 15, 2024Updated last year
- Lab research on Windows loader internals, PE loading, stack artifacts, and execution tradeoffs.☆246May 4, 2026Updated 5 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Orsted C2 Framework☆127Feb 9, 2026Updated 8 months ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆153Aug 4, 2025Updated last year
- A powerful, modular, lightweight and efficient command & control framework written in Nim.☆229Nov 3, 2025Updated last year
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆279Jun 18, 2025Updated last year
- Collection of red team techniques.☆70Apr 25, 2025Updated last year
- SharpSilentChrome is a C# project that "silently" installs browser extensions on Google Chrome or MS Edge by updating the browsers' Prefe…☆210Mar 19, 2026Updated 7 months ago
- ☆11Sep 11, 2023Updated 3 years ago
- ☆149Mar 23, 2025Updated last year
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆638Jun 25, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bypassing UAC with SSPI Datagram Contexts☆474Sep 24, 2023Updated 3 years ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆140Aug 31, 2025Updated last year
- ☆38Apr 15, 2025Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆13May 11, 2026Updated 5 months ago
- A command and control framework written in rust.☆390Aug 12, 2026Updated 2 months ago
- Proof of Concept CVE-2025-24990 (Agere Systems's driver)☆58Oct 31, 2025Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆195Nov 27, 2024Updated last year
- Inject DLLs into the explorer process using icons☆415May 18, 2025Updated last year
- Load and execute COFF files and Cobalt Strike BOFs in-memory☆226Sep 13, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Explorer Persistence technique : Hijacking cscapi.dll order loading path and writing our malicious dll into C:\Windows\cscapi.dll , when …☆87Jan 12, 2023Updated 3 years ago
- PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph☆26Aug 2, 2025Updated last year
- KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this p…☆228Jun 6, 2023Updated 3 years ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- A PowerShell console in C/C++ with all the security features disabled☆399Oct 14, 2025Updated last year
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆312May 23, 2026Updated 5 months ago
- malware written for educational purposes☆71Dec 31, 2025Updated 10 months ago