Koi
b3rt1ng/koiMulti-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…
command-and-controlids-ips-evasionlateral-movement+9
37
b3rt1ng/koiMulti-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
cytopia/pwncatpwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully…
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
maxprog-svg/cve-2026-68820_mass_exploitAutomated local privilege escalation exploit for Windows 10/11 targeting AFD.sys use-after-free to gain SYSTEM, with PPL bypass and EDR evasion for…
28zaaky/khaos-c2KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.
jm33-m0/emp3r0rLinux post-exploitation C2 framework with gossip mesh networking, memory-only operations, modular payloads, and OPSEC-focused transport for red team…
s3cur3th1ssh1t/offensivevbaThis repo covers some code execution and AV Evasion methods for Macros in Office documents
mvelazc0/purplesharpPurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows…
netero1010/schedulerunnerA C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation
twosevenonet/edr-redirRedirects EDR working folders using a Bind Filter (bindflt.sys) to bypass endpoint detection, corrupt EDR services, or replace with…
nullsection/chisel-ngChisel new generation, written in rust. SSH under WSS with some customization.
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
uber-common/mettaAn information security preparedness tool to do adversarial simulation.
flangvik/obfuscatedsharpcollectionAttempt at Obfuscated version of SharpCollection
lsecqt/portforwarderTCP Port Forwarding Utility on C