IrisC2 is A modular C2 framework for authorized security research, featuring Iris Client, Server, Beacon, stager templates, payload generation, tasking, file transfer, tunneling, BOF plugins, and real-time operations.
☆30Oct 19, 2026Updated this week
Alternatives and similar repositories for Iris
Users that are interested in Iris are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- can convert EXE/DLL into position-independent shellcode☆67Sep 14, 2026Updated last month
- RPC计划任务维权-过核晶☆14May 19, 2026Updated 5 months ago
- 绕过PPL dump lsass内存☆30Jul 6, 2026Updated 3 months ago
- 用zig实现精简版的donut,可将exe/dll/elf转换为shellcode☆22Jun 2, 2026Updated 4 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆35Oct 14, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆46Updated this week
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆37Feb 17, 2026Updated 8 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 6 months ago
- Reflective DLL loader.☆26Jun 30, 2026Updated 3 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Agony magic revision Godzilla, used to avoid anti -virus software monitoring☆14Jan 15, 2025Updated last year
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆68Oct 18, 2026Updated last week
- Another Injection Technique which eliminates creations of thread in remote process☆29Jul 7, 2026Updated 3 months ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆54Jun 28, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆155Sep 27, 2026Updated 3 weeks ago
- Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed expos…☆36Sep 11, 2026Updated last month
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 6 months ago
- BYOVD: Use 360 WFP driver to block EDR/XDR network connection.☆132Feb 10, 2026Updated 8 months ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- Rusty DoublePulsar - Cobalt Strike User-Defined Reflective Loader (UDRL) in Rust (Codename: DoublePulsar)☆117May 14, 2026Updated 5 months ago
- Kernel process termination using Microsoft's own signed driver.☆59Aug 10, 2026Updated 2 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆39Aug 13, 2026Updated 2 months ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆147Oct 4, 2026Updated 3 weeks ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆18Jan 3, 2026Updated 9 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆71Jul 12, 2026Updated 3 months ago
- Offset Independent Credential Extraction Tool☆71Sep 2, 2025Updated last year
- command control framework☆38Updated this week
- Activation Context Hijacking Evasion Tool☆314Jun 17, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆16Oct 13, 2026Updated last week
- Semantic-first multi-agent communication protocol — 4 concepts, 3 operations, infinite collaboration patterns☆26Sep 20, 2026Updated last month
- TongWebEJB漏洞利用工具☆36Apr 24, 2026Updated 6 months ago
- exchange接口爆破|邮箱爆破☆18Sep 19, 2024Updated 2 years ago
- 自研C2 功能展示。cs+spark的结合体。省去了本地客户端，便于团队操作。后续开源社区版。☆16Oct 30, 2024Updated last year
- Wrap Gemini CLI, Antigravity, ChatGPT Codex, Claude Code, Qwen Code, iFlow as an OpenAI/Gemini/Claude/Codex compatible API service, allow…☆45Jul 2, 2026Updated 3 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 6 months ago