Umbrella will protect your shellcode from the rain.
☆31Jun 4, 2025Updated last year
Alternatives and similar repositories for Umbrella
Users that are interested in Umbrella are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- pereprava is a minimal http/https redirector and reverse proxy for red team ops.☆16Oct 16, 2025Updated 9 months ago
- Invoke-SPSI - Simple PowerShell Shellcode Injector☆38Oct 9, 2025Updated 9 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆21Jul 15, 2025Updated last year
- ☆50Dec 5, 2025Updated 7 months ago
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆23Jul 11, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆58Jul 13, 2025Updated last year
- Impacket pre-compiled binaries☆20Jul 31, 2023Updated 2 years ago
- Aliasr is a modern, feature-rich TUI launcher for pentest commands.☆114Apr 23, 2026Updated 2 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 8 months ago
- ☆25Sep 6, 2025Updated 10 months ago
- BOF template with boflink and mutator kit support☆53Jan 8, 2026Updated 6 months ago
- Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.☆47Jun 23, 2026Updated 3 weeks ago
- a minimalistic winrm client written in python☆47Apr 17, 2026Updated 3 months ago
- A simple research-focused AES-based shellcode loader demonstrating in-memory execution and NTAPI techniques to help understand how custom…☆49Feb 19, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python tool to automatically perform SPN-less RBCD attacks.☆132Jan 7, 2026Updated 6 months ago
- A tool for coercing and relaying Kerberos authentication over DCOM and RPC.☆151Jul 17, 2025Updated last year
- ☆29Mar 24, 2026Updated 3 months ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆129Jul 11, 2025Updated last year
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆79Jul 1, 2026Updated 2 weeks ago
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆24Jun 4, 2026Updated last month
- Enable or Disable TokenPrivilege(s)☆15May 17, 2024Updated 2 years ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆134Updated this week
- A collection of DPAPI hunting and parsing BOFs☆38Mar 3, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- In-memory Encrypted Shellcode Execution Suite☆16Jan 26, 2026Updated 5 months ago
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆33Apr 14, 2026Updated 3 months ago
- A C++/Asm template for PIC/EXE/DLL malware☆24Aug 12, 2025Updated 11 months ago
- BOF to manage Active Directory Integrated DNS (ADIDNS)☆27Jul 28, 2025Updated 11 months ago
- Generate Secure, Polymorphic, Evasive (lol) Payloads☆33Oct 2, 2025Updated 9 months ago
- Convert your shellcode into an ASCII string☆129Jun 27, 2025Updated last year
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆148Nov 12, 2025Updated 8 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆312Jul 5, 2026Updated 2 weeks ago
- Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by…☆16May 6, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆19Feb 13, 2026Updated 5 months ago
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆107Jan 10, 2026Updated 6 months ago
- ☆70Apr 20, 2026Updated 3 months ago
- This GitHub repository contains benign specimens; however, the techniques demonstrated herein could potentially be exploited for maliciou…☆19Aug 4, 2024Updated last year
- 🧠 The ultimate resource for finding Beacon Object Files (BOFs).☆149Updated this week
- collection of blogs about malware development and analysis☆77Dec 2, 2025Updated 7 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆405Apr 26, 2026Updated 2 months ago