A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
☆21Oct 15, 2026Updated 2 weeks ago
Alternatives and similar repositories for C2-Tool-Collection
Users that are interested in C2-Tool-Collection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool to automatically create Edges for BloodHound☆10Feb 17, 2023Updated 3 years ago
- A Sliver C2 module for NetExec☆13Jun 14, 2026Updated 4 months ago
- Attack chain emulator. Write recipes for initial access easily☆24Feb 26, 2025Updated last year
- Kerberos manipulation library in pure Python☆27Oct 25, 2026Updated last week
- Sliver extension to bypass UAC via cmstp written in rust☆39Jun 4, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Poc script for ProxyShell exploit chain in Exchange Server☆25Feb 24, 2022Updated 4 years ago
- C# .Net Framework program that uses RunspaceFactory for Powershell command execution.☆30Nov 9, 2022Updated 3 years ago
- CVE ingestion + enrichment pipeline with an MCP server for AI agents.☆38Sep 30, 2026Updated last month
- Azure apim mini proxy☆18Jun 12, 2026Updated 4 months ago
- Evasion kit for Cobalt Strike☆17Aug 13, 2026Updated 2 months ago
- Allows extraction of the Global Address List (GAL) in OWA (Outlook Web Access)☆14Jun 17, 2021Updated 5 years ago
- smbclient-ng, a fast, cross-platform, and user friendly way to interact with SMB shares.☆22Oct 21, 2026Updated last week
- ☆13Jul 15, 2021Updated 5 years ago
- A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack grap…☆84Sep 15, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Community Eventing and Scripting examples☆21Aug 11, 2025Updated last year
- micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.☆230Apr 20, 2026Updated 6 months ago
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆196May 31, 2026Updated 5 months ago
- Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps…☆43Aug 9, 2026Updated 2 months ago
- An Ansible collection that installs a SCOM deployment with optional configurations.☆24Dec 9, 2025Updated 10 months ago
- ☆47Nov 5, 2018Updated 7 years ago
- Unofficial Ludus port of the SpecterOps K8s Workshop Lab☆14Sep 3, 2026Updated last month
- ☆25Sep 6, 2025Updated last year
- Just another casual shellcode native loader☆24Feb 3, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by …☆28Jul 15, 2026Updated 3 months ago
- ☆34Jun 24, 2026Updated 4 months ago
- A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge …☆35Mar 20, 2023Updated 3 years ago
- Coerce Windows authentication by generating, distributing, and cleaning up poisoned files at scale.☆40Jul 11, 2026Updated 3 months ago
- SATO is a PowerShell tool focuses on providing flexible, multi-grant type support for obtaining, managing, and analyzing Azure tokens.☆27Jun 6, 2026Updated 4 months ago
- AspXVenom automates the process of generating encoded shellcode and embedding it into ASPX webshells, providing a smooth workflow for pen…☆20Mar 19, 2025Updated last year
- Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.☆47Nov 29, 2024Updated last year
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- Experiments on the Windows Internals☆30Sep 22, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.☆115Jun 7, 2021Updated 5 years ago
- Claude MCP server to perform analysis on ROADrecon data☆53Mar 30, 2025Updated last year
- C++, Qt: Remote desktop application based on VNC protocol for Mac OS. One server - multiple clients.☆13Sep 4, 2023Updated 3 years ago
- Get or remove RunMRU values☆62Dec 11, 2019Updated 6 years ago
- Wfuzz fork☆48Jan 10, 2025Updated last year
- Study notes on Windows NTLM Reflection and token stealing based EOPs.☆22May 5, 2021Updated 5 years ago
- Repo to the corresponding blog post about implant P2P communications.☆13Dec 7, 2025Updated 10 months ago