Sleep Obfuscation via CreateThreadpoolTimer
☆24Jul 27, 2026Updated 2 months ago
Alternatives and similar repositories for Morpheus
Users that are interested in Morpheus are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆109Oct 11, 2026Updated last week
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last week
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- A collection of BOF-PE's that allow running tailscale from memory☆142Aug 27, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆79Aug 1, 2026Updated 2 months ago
- Hades is a fully-featured cross-platform Chrome Extension agent. Hades is designed for Mythic 3.0 and newer.☆49Aug 12, 2026Updated 2 months ago
- RISC-V VM based shellcode loader PoC - Still WIP☆38Aug 1, 2026Updated 2 months ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆43Sep 9, 2026Updated last month
- Mythic C2 agent with a full in-memory BOF loader for macOS and Linux☆107Sep 16, 2026Updated last month
- Ask the Web Account Manager (WAM) for Entra ID tokens☆162Sep 11, 2026Updated last month
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall☆38Sep 8, 2026Updated last month
- ☆37May 19, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 3 months ago
- Evasion kit for Cobalt Strike☆17Aug 13, 2026Updated 2 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆45Jun 14, 2026Updated 4 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆397Aug 16, 2026Updated 2 months ago
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆57Jul 8, 2026Updated 3 months ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆89Oct 10, 2026Updated last week
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Reversed cassandra source code for educational purposes☆36Jul 3, 2026Updated 3 months ago
- CVE ingestion + enrichment pipeline with an MCP server for AI agents.☆38Sep 30, 2026Updated 2 weeks ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- Fawkes is a golang Mythic C2 Agent exclusively written by AI.☆41Jul 21, 2026Updated 2 months ago
- A foundational C library for building operationally credible offensive capabilities☆94Sep 21, 2026Updated 3 weeks ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated 3 weeks ago
- Post-Ex BOF tooling for Hannibal☆24Nov 20, 2024Updated last year
- A header-only, freestanding C++20 template for IR-bytecode VM loaders☆27May 10, 2026Updated 5 months ago
- ☆83Sep 21, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆116Jul 14, 2026Updated 3 months ago
- ☆92Aug 5, 2026Updated 2 months ago
- Framework-agnostic log sanitizer for browsers and Node.js. Redacts secrets and infrastructure identifiers with stable HMAC tokens so even…☆22Sep 23, 2026Updated 3 weeks ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆144Oct 4, 2026Updated 2 weeks ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- More than just an agent harness for pentesting, yet lightweight and transparent.☆42Oct 7, 2026Updated last week