Alternatives and similar repositories for ExternalC2

Users that are interested in ExternalC2 are comparing it to the libraries listed below

• 001SPARTaN / aggressor_scripts
  A collection of useful scripts for Cobalt Strike
  ☆170Updated 10 months ago
• vysecurity / Aggressor-VYSEC
  ☆211Updated 6 years ago
• rasta-mouse / Aggressor-Script
  Collection of Aggressor Scripts for Cobalt Strike
  ☆172Updated 6 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆233Updated 2 years ago
• xorrior / raven
  CobaltStrike External C2 for Websockets
  ☆193Updated 5 years ago
• RedSiege / AggressorAssessor
  Aggressor scripts for phases of a pen test or red team assessment
  ☆184Updated 10 months ago
• Arno0x / NtlmRelayToEWS
  ntlm relay attack to Exchange Web Services
  ☆333Updated 7 years ago
• ramen0x3f / AggressorScripts
  ☆272Updated 2 years ago
• Und3rf10w / external_c2_framework
  Python api for usage with cobalt strike's External C2 specification
  ☆238Updated 2 years ago
• quickbreach / ExchangeRelayX
  An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
  ☆308Updated 2 years ago
• khr0x40sh / WhiteListEvasion
  Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.
  ☆128Updated 10 years ago
• Ridter / Exchange2domain
  CVE-2018-8581
  ☆372Updated 2 years ago
• dcsync / pycobalt
  Cobalt Strike Python API
  ☆301Updated 3 years ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆252Updated 6 years ago
• nettitude / Invoke-PowerThIEf
  The PowerThIEf, an Internet Explorer Post Exploitation library
  ☆131Updated 3 months ago
• ZonkSec / persistence-aggressor-script
  initial commit
  ☆174Updated 7 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆260Updated 6 years ago
• Mr-Un1k0d3r / SCT-obfuscator
  Cobalt Strike SCT payload obfuscator
  ☆143Updated 7 years ago
• taherio / redi
  Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
  ☆143Updated 7 years ago
• phackt / stager.dll
  Code from this article: https://blog.rapid7.com/2018/05/03/hiding-metasploit-shellcode-to-evade-windows-defender/
  ☆175Updated 4 years ago
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆325Updated 6 years ago
• outflanknl / external_c2
  POC for Cobalt Strike external C2
  ☆135Updated 3 years ago
• anthemtotheego / SharpExec
  ☆347Updated 3 years ago
• outflanknl / Recon-AD
  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  ☆329Updated 5 years ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆273Updated 5 years ago
• HarmJ0y / DAMP
  The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
  ☆380Updated 5 years ago
• 0x09AL / DNS-Persist
  DNS-Persist is a post-exploitation agent which uses DNS for command and control.
  ☆210Updated 7 years ago
• invokethreatguy / AggressorCollection
  Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors
  ☆154Updated 6 years ago
• threatexpress / aggressor-scripts
  Cobalt Strike Aggressor Scripts
  ☆143Updated 7 months ago
• decoder-it / powershellveryless
  Constrained Language Mode + AMSI bypass all in one
  ☆157Updated 5 years ago