Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
☆3,938Jun 4, 2026Updated 2 months ago
Alternatives and similar repositories for unicorn
Users that are interested in unicorn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Empire is a PowerShell and Python post-exploitation agent.☆7,863Jan 19, 2020Updated 6 years ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆13,085Aug 17, 2020Updated 6 years ago
- The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.☆5,558Sep 22, 2024Updated last year
- A swiss army knife for pentesting networks☆9,161Dec 6, 2023Updated 2 years ago
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,341Dec 6, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- PowerShell Runspace Post Exploitation Toolkit☆1,550Aug 2, 2019Updated 7 years ago
- Payload Generation Framework☆1,988Aug 21, 2024Updated 2 years ago
- Nishang - Offensive PowerShell for red team, penetration testing and offensive security.☆10,075Apr 25, 2024Updated 2 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆3,015Nov 19, 2025Updated 9 months ago
- Veil 3.1.X (Check version info in Veil at runtime)☆4,227Oct 9, 2023Updated 2 years ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- PowerShell Obfuscator☆4,321Aug 10, 2023Updated 3 years ago
- Wiki to collect Red Team infrastructure hardening resources☆4,521Oct 1, 2025Updated 10 months ago
- Covenant is a collaborative .NET C2 framework for red teamers.☆4,733Jul 18, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago
- TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.☆1,345Jan 31, 2022Updated 4 years ago
- Six Degrees of Domain Admin☆10,608Mar 2, 2026Updated 5 months ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆3,276Updated this week
- A tool to abuse Exchange services☆2,313Jun 10, 2024Updated 2 years ago
- MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communicati…☆529Apr 13, 2017Updated 9 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,108Nov 3, 2017Updated 8 years ago
- Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C☆9,000Mar 22, 2024Updated 2 years ago
- My musings with PowerShell☆2,733Nov 19, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CACTUSTORCH: Payload Generation for Adversary Simulations☆1,017Jul 3, 2018Updated 8 years ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆4,890Jun 15, 2020Updated 6 years ago
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,618Jan 23, 2024Updated 2 years ago
- Run PowerShell with rundll32. Bypass software restrictions.☆1,831Mar 17, 2021Updated 5 years ago
- Run PowerShell command without invoking powershell.exe☆1,559Apr 9, 2026Updated 4 months ago
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,216Sep 14, 2020Updated 5 years ago
- Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensi…☆4,689Jan 10, 2025Updated last year
- Impacket is a collection of Python classes for working with network protocols.☆16,054Updated this week
- AntiVirus Evasion Tool☆1,755Apr 23, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- SharpSploit is a .NET post-exploitation library written in C#☆1,884Aug 12, 2021Updated 5 years ago
- A tool for automating cracking methodologies through Hashcat from the TrustedSec team.☆1,855Updated this week
- This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on th…☆4,230May 11, 2023Updated 3 years ago
- Trying to tame the three-headed dog.☆5,150May 21, 2026Updated 3 months ago
- Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources☆1,530Jun 30, 2023Updated 3 years ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆6,565Jun 10, 2026Updated 2 months ago
- PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server☆2,740Dec 12, 2024Updated last year