Boomerang is a tool to expose multiple internal servers to web/cloud. Agent & Server are pretty stable and can be used in Red Team for Multiple levels of Pivoting and exposing multiple internal services to external/other networks
☆226Feb 9, 2021Updated 5 years ago
Alternatives and similar repositories for Boomerang
Users that are interested in Boomerang are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team…☆821Jun 5, 2026Updated 5 months ago
- A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.☆17Jul 1, 2020Updated 6 years ago
- Spin up RedTeam infrastructure on AWS via Ansible☆64Aug 25, 2020Updated 6 years ago
- ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …☆222Dec 8, 2022Updated 3 years ago
- BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.☆254Mar 6, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux☆1,429Oct 3, 2020Updated 6 years ago
- A post exploitation framework designed to operate covertly on heavily monitored environments☆2,177Sep 29, 2021Updated 5 years ago
- Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …☆741Aug 18, 2023Updated 3 years ago
- Windows Privilege Escalation from User to Domain Admin.☆1,477Dec 18, 2022Updated 3 years ago
- This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories whic…☆58Jan 10, 2018Updated 8 years ago
- This script runs multithreading module that connects to a remote TCP server, monitors active (opened) Microsoft Word documents (.doc,.doc…☆32Jul 24, 2020Updated 6 years ago
- Iterative AD discovery toolkit for offensive operations☆84Mar 16, 2020Updated 6 years ago
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆450Mar 8, 2023Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆146May 1, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Excel Macro Document Reader/Writer for Red Teamers & Analysts☆523May 19, 2026Updated 5 months ago
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.☆58Sep 2, 2021Updated 5 years ago
- ☆172Dec 8, 2022Updated 3 years ago
- A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies☆324Apr 8, 2023Updated 3 years ago
- This is a Shell Script to setup NTLM hash sniffing using the Raspberry Pi Zero. This tool can be used during Red Team assessments by atta…☆23Jun 7, 2017Updated 9 years ago
- ☆666Nov 17, 2021Updated 4 years ago
- Self-developed tools for Lateral Movement/Code Execution☆722Aug 17, 2021Updated 5 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Lightweight C# windows agent for Apfell☆17Mar 16, 2020Updated 6 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,887Aug 18, 2023Updated 3 years ago
- a CLI for ephemeral penetration testing☆18Dec 10, 2019Updated 6 years ago
- A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating sys…☆489Jul 23, 2020Updated 6 years ago
- Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…☆181Nov 10, 2022Updated 3 years ago
- UUID based Shellcode loader for your favorite C2☆86Dec 8, 2021Updated 4 years ago
- ☆225Oct 22, 2023Updated 3 years ago
- Cobalt Strike Shellcode Generator☆664Jan 8, 2025Updated last year
- A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.☆19Jun 24, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Petaq - Purple Team Command & Control Server☆103Dec 8, 2022Updated 3 years ago
- Extract credentials from lsass remotely☆2,213Sep 9, 2026Updated last month
- A User Impersonation tool - via Token or Shellcode injection☆419May 21, 2022Updated 4 years ago
- Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.☆92Oct 24, 2020Updated 6 years ago
- Initial Commit of Coresploit☆57Oct 12, 2021Updated 5 years ago
- A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user☆252Mar 7, 2022Updated 4 years ago
- Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)☆425Apr 22, 2021Updated 5 years ago