NTLM HTTP relay tool with SOCKS proxy for browser session hijacking
☆152Apr 6, 2026Updated 3 weeks ago
Alternatives and similar repositories for ghostsurf
Users that are interested in ghostsurf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.☆399Sep 26, 2025Updated 7 months ago
- PowerShell collector for adding SCCM attack paths to BloodHound with OpenGraph☆85Apr 21, 2026Updated last week
- Dump LSASS by spoofing command line arguments to procdump.☆20Oct 21, 2024Updated last year
- ☆55Jun 28, 2025Updated 10 months ago
- ☆46Apr 21, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A Windows tool that converts LDIF files to BloodHound CE☆31Dec 20, 2025Updated 4 months ago
- Command Augmentation support for BOFs and .NET assemblies across agents☆42Mar 17, 2026Updated last month
- Python module for running BOFs☆80Nov 28, 2025Updated 5 months ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆17Aug 14, 2023Updated 2 years ago
- Repository for Ludus french templates☆24Mar 1, 2026Updated last month
- ☆70Feb 12, 2026Updated 2 months ago
- Docker container escape enumeration tool.☆12Jan 23, 2021Updated 5 years ago
- Local SYSTEM auth trigger for relaying - X☆154Jul 23, 2025Updated 9 months ago
- Internal Monologue BOF☆79Dec 28, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Native C++ access to Active Directory over ADWS, no .NET, no WCF, no HTTP stack.☆73Mar 27, 2026Updated last month
- kerberos in rust for fun and profit☆71Mar 13, 2026Updated last month
- Sleep obfuscation in golang based on ekko☆14Jan 16, 2024Updated 2 years ago
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆218Dec 17, 2025Updated 4 months ago
- .NET port of Leron Gray's azbelt tool.☆26Sep 21, 2023Updated 2 years ago
- ☆108Aug 21, 2024Updated last year
- The command prompt has been disabled by your administrator☆42May 18, 2023Updated 2 years ago
- .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation☆401Jul 23, 2025Updated 9 months ago
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Python tool to automatically perform SPN-less RBCD attacks.☆128Jan 7, 2026Updated 3 months ago
- ☆221Mar 26, 2024Updated 2 years ago
- #️⃣ 🕸️ 👤 HTTP Headers Hashing☆13Aug 27, 2023Updated 2 years ago
- Ansible Role for Ludus to provision or remove a device to/from a Tailnet.☆14Dec 5, 2025Updated 4 months ago
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆172Apr 21, 2026Updated last week
- ☆200Mar 28, 2025Updated last year
- ForsHops☆60Mar 25, 2025Updated last year
- Tiny and fast port scanner (Sliver edition)☆30Feb 17, 2026Updated 2 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆289Apr 8, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Misery Loader to bypass modern EDR solutions☆19Dec 20, 2024Updated last year
- ZoomBotC2 is a stealthy Command and Control (C2) framework that leverages Zoom's API endpoints for covert communication between implants …☆57Jun 30, 2025Updated 9 months ago
- A tool to play with scheduled tasks on Windows, in Rust☆123Nov 1, 2025Updated 5 months ago
- ☆235Oct 8, 2024Updated last year
- Linux Process Injection via Seccomp Notifier☆94Dec 9, 2025Updated 4 months ago
- Make everyone in your VLAN ASRep roastable☆255Oct 7, 2025Updated 6 months ago
- A dotnet executable to get an Entra token in an authenticated runtime☆17Oct 30, 2024Updated last year