Tools

redsiege/graphstrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

spiderlabs/dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS…

impostorkeanu/bruteloops

Protocol agnostic online password guessing API.

4g3nt47/striker

Multi-operator C2 framework with native C and Python agents, HTTP(S) channels, asynchronous tasking, and a reactive web UI for red team operations.

mr-r00t11/cve-2024-23692

Rejetto HFS (HTTP File Server) is a simple web file server that facilitates file sharing over a network or the internet.

marcin-wolak/simplermidiscoverer

Simple JMX RMI scanning tool

d4vinci/cuteit

IP obfuscator made to make a malicious ip a bit cuter

kcarretto/paragon

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

its-arun/cve-2022-39197

Proof-of-concept exploit for CVE-2022-39197, enabling remote code execution against CobaltStrike <= 4.7.1 via malicious SVG payload served over HTTP.

persistent-security/smshell

PoC for a SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers

vnhacker1337/cve-2022-27925-poc

Zimbra RCE simple poc

demon-i386/zoshrinkc2

DNS over HTTPS targeted malware (only runs once)

brianwrf/s2-053-cve-2017-12611

A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)

gsoffmarket/malvinci

This simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through…

j3ssie/c2s

Command and Control server on Slack

gildasio/wshlient

A simple tool to interact with web shells and command injection vulnerabilities