Alternatives and similar repositories for offsec

Users that are interested in offsec are comparing it to the libraries listed below

• nopcorn / DuckDuckC2
  A proof-of-concept C2 channel through DuckDuckGo's image proxy service
  ☆77Updated 2 years ago
• Primusinterp / PrimusC2
  A C2 framework built for my bachelors thesis
  ☆56Updated 3 weeks ago
• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆55Updated 2 years ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆42Updated last year
• almandin / krbjack
  A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.
  ☆135Updated last year
• truerustyy / wcreddump
  Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…
  ☆79Updated last year
• p0dalirius / CVE-2022-45771-Pwndoc-LFI-to-RCE
  Pwndoc local file inclusion to remote code execution of Node.js code on the server
  ☆47Updated last year
• eversinc33 / Invoke-Pre2kSpray
  Enumerate domain machine accounts and perform pre2k password spraying.
  ☆69Updated 2 years ago
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆83Updated 2 years ago
• 4ndr34z / prenum
  ☆29Updated 2 years ago
• nullsection / DLL-Spoofer
  POC for DLL Proxying / Hijacking
  ☆63Updated 8 months ago
• yanncam / ShuckNT
  ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication …
  ☆76Updated last year
• mtimani / Prometheus
  Recon scripts for Red Team and Web blackbox auditing
  ☆26Updated last month
• g0h4n / RDE1
  RDE1 (Rusty Data Exfiltrator) is client and server tool allowing auditor to extract files from DNS and HTTPS protocols written in Rust. �…
  ☆42Updated 10 months ago
• Workingdaturah / BOF-Learning
  Cobalt Strike BOFS
  ☆16Updated 2 years ago
• nyxgeek / imgdevil
  quick and dirty proof-of-concept to hide shells in images
  ☆51Updated last year
• smokeme / PDFator
  ☆27Updated 2 years ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆70Updated 2 years ago
• ASP4RUX / bypassEDR-AV
  ☆59Updated last year
• MythicC2Profiles / discord
  Discord C2 Profile for Mythic
  ☆33Updated 11 months ago
• synacktiv / CVE-2024-43468
  ☆94Updated last year
• optiv / KnockKnock
  Enumerate valid users within Microsoft Teams and OneDrive with clean output.
  ☆60Updated last year
• Leo4j / ShellGen
  PowerShell script to generate ShellCode in various formats
  ☆46Updated last year
• inb1ts / CSSHide
  Encodes a payload within a generated mock-CSS file
  ☆59Updated 2 years ago
• 4ndr34z / ntlmthief
  ☆52Updated 2 years ago
• nickzer0 / RagingRotator
  A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.
  ☆80Updated last year
• RWXstoned / GimmeShelter
  Situational Awareness script to identify how and where to run implants
  ☆67Updated last year
• Im10n / CVE-2024-3183-POC
  POC for CVE-2024-3183 (FreeIPA Rosting)
  ☆27Updated last year
• 0xEr3bus / ShadowForgeC2
  ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.
  ☆51Updated 2 years ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year