Alternatives and similar repositories for CS-Aggressor-Kit

Users that are interested in CS-Aggressor-Kit are comparing it to the libraries listed below

• WafflesExploits / CobaltStrike-YARA-Bypass-f0b627fc
  Repository of scripts from my blog post on bypassing the YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellco…
  ☆39Updated 7 months ago
• kyxiaxiang / Safetasklist
  Help red teams find opsec processes during engagements
  ☆40Updated 5 months ago
• kyxiaxiang / AV_EDR_EPP_Notes
  ☆47Updated last year
• mertdas / SharpIncrease
  A Tool that aims to evade av with binary padding
  ☆151Updated 11 months ago
• Adaptix-Framework / Extension-Kit
  AdaptixFramework Extension Kit
  ☆126Updated last week
• v1k1ngfr / fuegoshell
  Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445
  ☆45Updated last year
• EspressoCake / Defender-Exclusions-Creator-BOF
  ☆80Updated last year
• Cobalt-Strike / sleepmask-vs
  A simple Sleepmask BOF example
  ☆101Updated 9 months ago
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆87Updated 2 years ago
• Tw1sm / SQL-BOF
  Library of BOFs to interact with SQL servers
  ☆171Updated last month
• werdhaihai / SharpAltShellCodeExec
  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
  ☆77Updated 2 years ago
• realstatus / CVE-2024-40711-Exp
  CVE-2024-40711-exp
  ☆42Updated 7 months ago
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆155Updated last year
• weaselsec / GodPotato-Aggressor-Script
  ☆88Updated last year
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆98Updated last year
• ScriptIdiot / BOF-patchit
  An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…
  ☆135Updated 2 years ago
• Ridter / netsync
  Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.
  ☆50Updated 3 months ago
• F4l13n5n0w / sn0wldr
  This project is an AES loader for c2 shellcode
  ☆26Updated last year
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆123Updated last week
• SlimeOnSecurity / PrintSpoofer-BOF
  ☆44Updated last month
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆72Updated last year
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆82Updated last month
• Leo4j / SessionExec
  Execute commands in other Sessions
  ☆88Updated 10 months ago
• decoder-it / ADCSCoercePotato
  ☆226Updated last year
• ProcessusT / SharpVenoma
  CSharp reimplementation of Venoma, another C++ Cobalt Strike beacon dropper with custom indirect syscalls execution
  ☆45Updated last year
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆55Updated last year
• Meowmycks / koneko
  Robust Cobalt Strike shellcode loader with multiple advanced evasion features
  ☆162Updated last month
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆205Updated last year
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆126Updated last week
• Octoberfest7 / CVE-2023-36874_BOF
  Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
  ☆206Updated last year