Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
☆3,954Oct 28, 2026Updated this week
Alternatives and similar repositories for unicorn
Users that are interested in unicorn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Empire is a PowerShell and Python post-exploitation agent.☆7,846Jan 19, 2020Updated 6 years ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆13,069Aug 17, 2020Updated 6 years ago
- The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.☆5,580Sep 22, 2024Updated 2 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,552Aug 2, 2019Updated 7 years ago
- A swiss army knife for pentesting networks☆9,169Dec 6, 2023Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,347Dec 6, 2023Updated 2 years ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- Nishang - Offensive PowerShell for red team, penetration testing and offensive security.☆10,176Apr 25, 2024Updated 2 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆3,050Nov 19, 2025Updated 11 months ago
- Veil 3.1.X (Check version info in Veil at runtime)☆4,223Oct 9, 2023Updated 3 years ago
- PowerShell Obfuscator☆4,346Aug 10, 2023Updated 3 years ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆3,292Sep 21, 2026Updated last month
- Covenant is a collaborative .NET C2 framework for red teamers.☆4,750Jul 18, 2024Updated 2 years ago
- Wiki to collect Red Team infrastructure hardening resources☆4,547Oct 1, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.☆1,349Jan 31, 2022Updated 4 years ago
- Six Degrees of Domain Admin☆10,624Mar 2, 2026Updated 7 months ago
- A tool to abuse Exchange services☆2,311Jun 10, 2024Updated 2 years ago
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,109Nov 3, 2017Updated 8 years ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆4,890Jun 15, 2020Updated 6 years ago
- Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C☆9,005Mar 22, 2024Updated 2 years ago
- MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communicati…☆530Apr 13, 2017Updated 9 years ago
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,630Jan 23, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Run PowerShell command without invoking powershell.exe☆1,560Apr 9, 2026Updated 6 months ago
- My musings with PowerShell☆2,738Nov 19, 2021Updated 4 years ago
- PowerShell Remote Download Cradle Generator & Obfuscator☆852Mar 23, 2018Updated 8 years ago
- A tool for automating cracking methodologies through Hashcat from the TrustedSec team.☆1,865Updated this week
- PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.☆2,021Oct 10, 2018Updated 8 years ago
- Trying to tame the three-headed dog.☆5,202May 21, 2026Updated 5 months ago
- Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensi…☆4,750Jan 10, 2025Updated last year
- Impacket is a collection of Python classes for working with network protocols.☆16,210Updated this week
- AntiVirus Evasion Tool☆1,760Apr 23, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆6,643Jun 10, 2026Updated 4 months ago
- SharpSploit is a .NET post-exploitation library written in C#☆1,891Aug 12, 2021Updated 5 years ago
- This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on th…☆4,225May 11, 2023Updated 3 years ago
- Run PowerShell with rundll32. Bypass software restrictions.☆1,832Mar 17, 2021Updated 5 years ago
- The goal of this repository is to document the most common techniques to bypass AppLocker.☆2,092Sep 11, 2023Updated 3 years ago
- Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources☆1,527Jun 30, 2023Updated 3 years ago
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,220Sep 14, 2020Updated 6 years ago