EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.
☆71Sep 20, 2024Updated last year
Alternatives and similar repositories for EC2StepShell
Users that are interested in EC2StepShell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Golang Shlyuz Implant Implementation☆13May 23, 2025Updated last year
- Bash tool used for proactive detection of malicious activity on macOS systems.☆39Sep 29, 2025Updated 9 months ago
- Cloud Exploit Framework☆112May 11, 2022Updated 4 years ago
- FireProx written in Go☆20Apr 13, 2024Updated 2 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Feb 26, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆42Nov 25, 2025Updated 7 months ago
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- Python tool to find vulnerable AD object and generating csv report☆26Jul 4, 2022Updated 4 years ago
- Community Eventing and Scripting examples☆19Aug 11, 2025Updated 11 months ago
- Scripts that I've written that others may find useful☆14Aug 17, 2022Updated 3 years ago
- ☆12Jun 22, 2022Updated 4 years ago
- Microsoft Graph API post-exploitation toolkit☆95Jul 13, 2024Updated 2 years ago
- Collection of templates for linux☆10Jun 2, 2024Updated 2 years ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆47Jun 25, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆19Dec 18, 2024Updated last year
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Chromium Cookie import / export tool☆11Jul 21, 2024Updated 2 years ago
- ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication …☆79Oct 18, 2024Updated last year
- Monitor your target continuously for new subdomains!☆25Mar 18, 2023Updated 3 years ago
- Small utility script to notify via Slack about Hashcat's progress during a password cracking session☆10Mar 10, 2019Updated 7 years ago
- The standard Go net.Conn interface using Azure Storage services as the transport layer.☆32Mar 19, 2026Updated 4 months ago
- Retrieve AD accounts description and search for password in it☆81Jul 21, 2022Updated 4 years ago
- ☆198Jan 18, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- RepoReaper is an automated tool crafted to meticulously scan and identify exposed .git repositories within specified domains and their su…☆35Feb 20, 2024Updated 2 years ago
- AAD related enumeration in Nim☆132Sep 7, 2023Updated 2 years ago
- A PowerShell script to prevent Sysmon from writing its events☆17Apr 23, 2020Updated 6 years ago
- A user enumeration tool for Slack.☆37Jun 10, 2024Updated 2 years ago
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- ☆16Oct 18, 2024Updated last year
- GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments☆90Jun 22, 2024Updated 2 years ago
- Automatically deploying Mythic C2 in Azure using Terraform☆21Jul 3, 2026Updated 2 weeks ago
- A prototype malware C2 channel using x509 certificates over mTLS☆153Mar 15, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆289Jun 8, 2023Updated 3 years ago
- ☆157Mar 5, 2026Updated 4 months ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆34Nov 13, 2023Updated 2 years ago
- Determine privileges from cloud credentials via brute-force testing.☆69Aug 22, 2024Updated last year
- Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Si…☆78Jan 13, 2026Updated 6 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆155May 3, 2024Updated 2 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆35Mar 28, 2023Updated 3 years ago