A Payload Analysis Framework
☆125Oct 9, 2025Updated last year
Alternatives and similar repositories for citadel
Users that are interested in citadel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆99Jul 3, 2025Updated last year
- adws enumeration bof☆176Sep 1, 2026Updated last month
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆150Jul 2, 2025Updated last year
- async beacon object file for notification on process creation☆17Mar 24, 2026Updated 6 months ago
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 10 months ago
- A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.☆245Sep 17, 2026Updated last month
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆131Dec 7, 2025Updated 10 months ago
- Using Chromium-based browsers as a proxy for C2 traffic.☆156Dec 6, 2025Updated 10 months ago
- Local SYSTEM auth trigger for relaying - X☆162Jul 23, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆161Jul 15, 2026Updated 3 months ago
- Lateral movement with DCOM DLL hijacking☆185Jul 4, 2025Updated last year
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆319Updated this week
- Group Policy Objects manipulation and exploitation framework☆322Aug 28, 2026Updated last month
- Blog/Journal on how to backdoor VSCode extensions☆81Feb 24, 2026Updated 7 months ago
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated 11 months ago
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 8 months ago
- A BOF that's a BOF Loader and more☆213Apr 6, 2026Updated 6 months ago
- Linker for Beacon Object Files☆192Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- load shellcode without P/D Invoke and VirtualProtect call.☆169Sep 2, 2025Updated last year
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- ClickForClickOnce - Generate configurable clickonce payloads☆105Apr 17, 2026Updated 6 months ago
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆72Dec 25, 2025Updated 9 months ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 9 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆312Sep 18, 2024Updated 2 years ago
- Mythic C2 Agent written in x64 PIC C☆86Jan 29, 2025Updated last year
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆118Dec 21, 2025Updated 9 months ago
- Run CobaltStrike aggressorscript over TCP☆15Feb 9, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- C2 Agent fully PIC for Mythic with advanced evasion capabilities, dotnet/powershell/shellcode/bof memory executions, lateral moviments, p…☆218Dec 30, 2025Updated 9 months ago
- Enumerate Domain Users Without Authentication☆313Apr 22, 2025Updated last year
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆194May 31, 2026Updated 4 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆316Jun 28, 2026Updated 3 months ago
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆155Apr 18, 2025Updated last year
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 2 months ago