Alternatives and similar repositories for offsec

Users that are interested in offsec are comparing it to the libraries listed below

• nopcorn / DuckDuckC2
  A proof-of-concept C2 channel through DuckDuckGo's image proxy service
  ☆75Updated last year
• p0dalirius / CVE-2022-45771-Pwndoc-LFI-to-RCE
  Pwndoc local file inclusion to remote code execution of Node.js code on the server
  ☆46Updated 7 months ago
• Primusinterp / PrimusC2
  A C2 framework built for my bachelors thesis
  ☆55Updated 10 months ago
• almandin / krbjack
  A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.
  ☆130Updated 7 months ago
• 0xEr3bus / ShadowForgeC2
  ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.
  ☆47Updated 2 years ago
• amauricio / junkshell
  ☆70Updated 5 months ago
• eversinc33 / Invoke-Pre2kSpray
  Enumerate domain machine accounts and perform pre2k password spraying.
  ☆70Updated 2 years ago
• Semperis / GoldenDMSA
  This tool exploits Golden DMSA attack against delegated Managed Service Accounts.
  ☆71Updated last month
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆42Updated last year
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆83Updated last year
• smokeme / PDFator
  ☆27Updated 2 years ago
• yo-yo-yo-jbo / injection_and_hooking_intro
  ☆38Updated 2 years ago
• nullsection / DLL-Spoofer
  POC for DLL Proxying / Hijacking
  ☆61Updated 3 months ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆72Updated last year
• g0h4n / RDE1
  RDE1 (Rusty Data Exfiltrator) is client and server tool allowing auditor to extract files from DNS and HTTPS protocols written in Rust. �…
  ☆42Updated 4 months ago
• ASP4RUX / bypassEDR-AV
  ☆58Updated 9 months ago
• synacktiv / CVE-2024-43468
  ☆91Updated 7 months ago
• RWXstoned / GimmeShelter
  Situational Awareness script to identify how and where to run implants
  ☆62Updated 8 months ago
• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆56Updated last year
• 4ndr34z / prenum
  ☆28Updated 2 years ago
• 0xAbdullah / Offensive-Snippets
  A repository with my code snippets for research/education purposes.
  ☆51Updated 2 years ago
• nyxgeek / imgdevil
  quick and dirty proof-of-concept to hide shells in images
  ☆50Updated last year
• truerustyy / wcreddump
  Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…
  ☆77Updated 9 months ago
• 4ndr34z / ntlmthief
  ☆52Updated last year
• cisagov / snafflepy
  Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler
  ☆109Updated last month
• byinarie / teams_dump
  PoC for dumping and decrypting cookies in the latest version of Microsoft Teams
  ☆132Updated last year
• Cyxow / CVE-2024-3183-POC
  POC for CVE-2024-3183 (FreeIPA Rosting)
  ☆25Updated last year
• 0xBienCuit / InfraRed-AWS
  ☆60Updated 10 months ago
• iomoath / RedWardenLite
  A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.
  ☆45Updated 2 years ago
• inb1ts / CSSHide
  Encodes a payload within a generated mock-CSS file
  ☆59Updated last year