Red Teaming Tradecraft
☆62Sep 28, 2022Updated 4 years ago
Alternatives and similar repositories for tradecraft
Users that are interested in tradecraft are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Red Team Initial Access Guide: Recon, exploitation, C2 setup, lateral movement, persistence, evasion techniques, and real-world case stud…☆14Jun 8, 2025Updated last year
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- ☆168Jul 6, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Wire and behavioural de-fingerprinting patches for impacket and NetExec☆21Nov 5, 2026Updated last week
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆41Oct 14, 2026Updated 3 weeks ago
- ☆17Feb 14, 2025Updated last year
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 11 months ago
- ☆11May 19, 2022Updated 4 years ago
- Yet another zip smuggler☆35Jul 16, 2025Updated last year
- Bunch of BOF files☆46Jun 30, 2025Updated last year
- Tailscale/Headscale C2 profile and agent for Mythic☆35Mar 14, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- Linux Shared Library to Shellcode Loader☆105Feb 15, 2026Updated 8 months ago
- Dumping LSASS Evaded Endpoint Security Solutions☆19Feb 15, 2025Updated last year
- Random BOFs for LDAP tradecraft☆75Sep 9, 2025Updated last year
- Hides in your attic... I mean process☆26Apr 29, 2026Updated 6 months ago
- a golang based dotnet ysoserial poc generation tool. Operated by cursor and reproduce from metasploit☆15Nov 12, 2025Updated last year
- Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them b…☆33Sep 3, 2026Updated 2 months ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆33Oct 16, 2026Updated 3 weeks ago
- ☆49Feb 26, 2026Updated 8 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Fawkes is a golang Mythic C2 Agent exclusively written by AI.☆42Jul 21, 2026Updated 3 months ago
- Rust Artifact Kit is a sophisticated research framework demonstrating advanced evasion techniques through Rust-based artifact loaders.☆14Sep 15, 2025Updated last year
- Speedy probe-based UDP service scanner☆132Oct 21, 2025Updated last year
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- ☆142Jan 16, 2025Updated last year
- Project Sato - C2☆10Apr 24, 2025Updated last year
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Monitors your red team infrastructure.☆22Oct 28, 2026Updated 2 weeks ago
- modified mssqlclient from impacket to extract policies from the SCCM database☆52Feb 24, 2026Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- C2Matrix Automation☆16Sep 10, 2023Updated 3 years ago
- A Mythic C2 Profile that uses AWS S3 for command and control communication with per-execution credential isolation.☆15Mar 14, 2026Updated 7 months ago
- Local Windows credential extraction☆26Jul 14, 2026Updated 3 months ago
- Self-mutating macOS implant☆137Apr 18, 2026Updated 6 months ago
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- Official documentation for BloodHound☆32Updated this week
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
Are these results useful?