28 Repos
Awesome GitHub RepositoriesInitial Access Frameworks
Tools for password spraying and generating malicious payloads.
Explore 28 awesome GitHub repositories matching part of an awesome list · Initial Access Frameworks. Refine with filters or upvote what's useful.
Awesome Initial Access Frameworks GitHub Repositories
Finde die besten Repos mit KI.Wir suchen mit KI nach den am besten passenden Repositories.
- thewover/donut
TheWover/donut
4,461Auf GitHub ansehenDonut is a toolset for loading and executing payloads in memory, featuring a position-independent shellcode generator, an in-memory payload injector, and a .NET assembly loader. It is designed to convert executable files and scripts into shellcode that can be executed within the memory space of a remote process without writing files to disk. The project specializes in security evasion through memory-based patching and payload obfuscation using symmetric block ciphers and compression. It includes a remote payload stager to retrieve encrypted modules from HTTP or DNS servers during runtime, red
In-memory execution of various file types and assemblies.
C - optiv/scarecrow
optiv/ScareCrow
2,888Auf GitHub ansehenTo view the latest version of ScareCrow or to submit an issue, reference https://github.com/Tylous/ScareCrow.
Payload creation framework designed for EDR evasion.
Go - gloxec/crossc2
gloxec/CrossC2
2,559Auf GitHub ansehengenerate CobaltStrike's cross-platform payload
Generating cross-platform payloads for command frameworks.
Candroidcobalt-strikecross-platform - sensepost/ruler
sensepost/ruler
2,306Auf GitHub ansehenA tool to abuse Exchange services
Remote interaction with exchange servers.
Go - cobbr/sharpsploit
cobbr/SharpSploit
1,881Auf GitHub ansehenSharpSploit is a .NET post-exploitation library written in C# that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers.
Library for .NET post-exploitation tasks.
C# - klezvirus/inceptor
klezVirus/inceptor
1,805Auf GitHub ansehen:triangularflagon_post: This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/
Template-driven framework for AV and EDR evasion.
Assembly - byt3bl33d3r/sprayingtoolkit
byt3bl33d3r/SprayingToolkit
1,574Auf GitHub ansehenScripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient
Efficient password spraying against enterprise services.
Python - 0xsp-srd/mortar
0xsp-SRD/mortar
1,506Auf GitHub ansehenevasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
Evasion techniques to bypass security product detection.
Pascal - optiv/freeze
optiv/Freeze
1,477Auf GitHub ansehenTo view the latest version of Freeze or to submit an issue, reference https://github.com/Tylous/Freeze.
Toolkit for bypassing EDRs using suspended processes.
Go - rasta-mouse/threatcheck
rasta-mouse/ThreatCheck
1,409Auf GitHub ansehenIdentifying bytes flagged by security software.
C# - icyguider/shhhloader
icyguider/Shhhloader
1,274Auf GitHub ansehenShhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed.
Shellcode loader designed to bypass security monitoring.
Python - knavesec/credmaster
knavesec/CredMaster
1,276Auf GitHub ansehenRefactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
Password spraying with IP rotation to bypass throttling.
Pythonbrute-forcehacktoberfestleet-haxor-toolz - med0x2e/gadgettojscript
med0x2e/GadgetToJScript
1,123Auf GitHub ansehenA tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA scripts. The current gadget triggers a call to Activator.CreateInstance() when deserialized using BinaryFormatter from jscript/vbscript/vba, this…
Generating serialized gadgets for .NET assembly execution.
C# - 9emin1/charlotte
9emin1/charlotte
c++ fully undetected shellcode launcher ;)
Undetected shellcode launcher written in C++.
Python - bats3c/darkarmour
bats3c/darkarmour
Store and execute an encrypted windows binary from inside memory, without a single bit touching disk.
Windows antivirus evasion for payloads.
Python - print3m/dllshimmer
Print3M/DllShimmer
Weaponize DLL hijacking easily. Backdoor any function in any DLL without disrupting normal process operation.
Weaponizing DLL hijacking for backdoor creation.
Go - optiv/ivy
optiv/Ivy
To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy.
Framework for executing VBA code directly in memory.
Go - nyxgeek/o365recon
nyxgeek/o365recon
script to retrieve information via O365 and AzureAD with a valid cred
Retrieving information from cloud services with valid credentials.
PowerShell - fireeye/duedlligence
fireeye/DueDLLigence
Shellcode runner framework for application whitelisting bypasses and DLL side-loading. The shellcode included in this project spawns calc.exe.
Shellcode runner for application whitelisting bypass.
C#
