zimnyaa / grpcsshLinks
A simple reverse ssh/proxy implant PoC for *nix systems.
☆55Updated last year
Alternatives and similar repositories for grpcssh
Users that are interested in grpcssh are comparing it to the libraries listed below
Sorting:
- A simple rpc2socks alternative in pure Go.☆29Updated last year
- ShootCutMe an .LNK file creator tool for redteamer☆13Updated 10 months ago
- Golang Implementation of Hell's gate☆19Updated 2 years ago
- ☆19Updated last year
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆40Updated last year
- PoC MSI payload based on ASEC/AhnLab's blog post☆23Updated 2 years ago
- Aggressor script to automatically download and load an arsenal of open source and private Cobalt Strike tooling.☆25Updated last year
- Items related to the RedELK workshop given at security conferences☆29Updated last year
- ☆23Updated last year
- ☆18Updated 10 months ago
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Updated 2 years ago
- Small utility package for manipulating Windows process tokens☆26Updated 3 years ago
- Beacon Object Files used for Cobalt Strike☆19Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- A third-party Gopher Assassin for the Havoc Framework.☆44Updated last year
- A collection of sample code used in some experiments with Sliver C2☆14Updated 2 years ago
- Tool to aid in dumping LSASS process remotely☆40Updated last year
- Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…☆49Updated 3 years ago
- OSED Practice binary☆24Updated last year
- Shellcode reflective DLL injection in Rust☆24Updated 2 months ago
- Command and Control Framework using powershell implants☆35Updated 2 months ago
- ☆47Updated 2 years ago
- Repository to gather the BOF files I will be developing☆10Updated 11 months ago
- ☆18Updated 2 months ago
- A python port of CCob's ThreadlessInject☆25Updated 2 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆33Updated last year
- 「⚙️」Detect which native Windows API's (NtAPI) are being hooked☆39Updated 8 months ago
- ☆17Updated last year
- Example of using Sleep to create better named pipes.☆41Updated 2 years ago
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Updated last year