A Payload Analysis Framework
☆124Oct 9, 2025Updated last year
Alternatives and similar repositories for citadel
Users that are interested in citadel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- adws enumeration bof☆176Sep 1, 2026Updated 2 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆100Jul 3, 2025Updated last year
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆150Jul 2, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆172Jul 23, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- async beacon object file for notification on process creation☆18Mar 24, 2026Updated 7 months ago
- A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.☆248Sep 17, 2026Updated last month
- Using Chromium-based browsers as a proxy for C2 traffic.☆155Dec 6, 2025Updated 11 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 3 weeks ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆132Dec 7, 2025Updated 11 months ago
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 9 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- Group Policy Objects manipulation and exploitation framework☆326Aug 28, 2026Updated 2 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Blog/Journal on how to backdoor VSCode extensions☆84Feb 24, 2026Updated 8 months ago
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated last year
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 11 months ago
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 3 years ago
- Lateral movement with DCOM DLL hijacking☆185Jul 4, 2025Updated last year
- ClickForClickOnce - Generate configurable clickonce payloads☆107Apr 17, 2026Updated 6 months ago
- ☆37May 19, 2026Updated 5 months ago
- load shellcode without P/D Invoke and VirtualProtect call.☆170Sep 2, 2025Updated last year
- Linker for Beacon Object Files☆193Oct 20, 2026Updated 2 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…☆104Sep 30, 2026Updated last month
- Cobalt Strike BOF for evasive .NET assembly execution☆331Mar 31, 2025Updated last year
- Tools for analyzing EDR agents☆280Jun 10, 2024Updated 2 years ago
- A BOF that's a BOF Loader and more☆213Apr 6, 2026Updated 7 months ago
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 8 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 10 months ago
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆95Sep 16, 2026Updated last month
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆118Jan 20, 2025Updated last year
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆197Updated this week
- Enumerate Domain Users Without Authentication☆314Apr 22, 2025Updated last year
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆74Dec 25, 2025Updated 10 months ago
- C2 Agent fully PIC for Mythic with advanced evasion capabilities, dotnet/powershell/shellcode/bof memory executions, lateral moviments, p…☆219Dec 30, 2025Updated 10 months ago
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆360Sep 7, 2026Updated 2 months ago