Alternatives and similar repositories for Agentic-Flow-Corruption-Attacks

Users that are interested in Agentic-Flow-Corruption-Attacks are comparing it to the libraries listed below

• whokilleddb / sinister-vsix
  Blog/Journal on how to backdoor VSCode extensions
  ☆74Updated 2 months ago
• kapellos / LNKSmuggler
  A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.
  ☆87Updated 9 months ago
• nickvourd / Rocabella
  Sniffing files generator
  ☆59Updated 7 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆100Updated 3 months ago
• zarkones / BloodfangC2
  Modern PIC implant for Windows (64 & 32 bit)
  ☆104Updated 2 months ago
• praetorian-inc / google-redirector
  A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.
  ☆102Updated last month
• andreisss / Living-off-the-COM-Type-Coercion-Abuse
  This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…
  ☆51Updated 4 months ago
• dmcxblue / Claude-C2
  Utilizng an MCP Server to communicate with your C2
  ☆82Updated 4 months ago
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆80Updated 7 months ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆53Updated 2 months ago
• 0xRedpoll / SignalKeyBOF
  BOF to decrypt Signal Desktop chat logs
  ☆73Updated 7 months ago
• OtterHacker / ShareFouine
  ☆51Updated 11 months ago
• xpn / mythic_mcp
  A simple POC to expose Mythic as a MCP server
  ☆69Updated 6 months ago
• fin3ss3g0d / NativeThreadpool
  Work, timer, and wait callback example using solely Native Windows APIs.
  ☆89Updated last year
• 0xB455 / ActiveSyncBruter
  ☆26Updated 7 months ago
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆37Updated 5 months ago
• duhirsch / MoveEdr
  Permanently disable EDRs as local admin
  ☆116Updated 3 months ago
• cybersectroll / TrollDump
  ☆82Updated last year
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆56Updated 5 months ago
• HulkOperator / AuthStager
  ☆58Updated 11 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆40Updated last year
• tijme / nimplant-beacon-position-independent-c-code
  A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.
  ☆62Updated 7 months ago
• rasta-mouse / KerbApp
  ☆29Updated last year
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆41Updated 2 weeks ago
• dirkjanm / scepreq
  SCEP request tool for AD CS and Intune
  ☆69Updated 2 months ago
• kozmer / rspy
  rust port of pspy with support for process monitoring over dbus
  ☆35Updated 3 months ago
• Teach2Breach / hollow_rs
  A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.
  ☆30Updated 8 months ago
• SecTheBit / ZoomBotC2
  ☆44Updated 3 months ago
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆80Updated 6 months ago
• sudonoodle / Aggressor-Aggregator
  A helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike.
  ☆18Updated last year