ratandc2 Goto Github PK

.net-anti-debug

Anti-Debugger to stop multiple malicious tools and hooks on your software.

a-study-of-remote-access-trojans

This repository contains a curated list of papers, articles and other sources related to remote access trojans.

alanframework

A C2 post-exploitation framework

am0n-eye

androspy

anticrack-dotnet

C Sharp project contains a plenty of advanced anti debugging and anti virtualization techniques and anti dll injection.

apollo

A .NET Framework 4.0 Windows Agent

atlasc2

C# C2 Framework centered around Stage 1 operations

awesome-c2

C2

be-eac-injector

Windows dll injector EAC + BE

beacon_source

not a reverse-engineered version of the Cobalt Strike Beacon

besotoken

A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

bof-klist

A simple BOF implementation of klist using Windows API

bof-regsave

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

bofs

[XXX] Collection of Beacon Object Files

brokenflow

A simple PoC to invoke an encrypted shellcode by using an hidden call

bullettrain

A manual PE mapping implementation, aka reflective loader

bypasscredguard

Credential Guard Bypass Via Patching Wdigest Memory

bypassuac

bypass uac

bypassuac_icmluautil

Use ICMLuaUtil to Bypass UAC!

c2

A basic C2 framework written in C

c2-gui-template

Template for a C2 GUI coded in C++ using Win32 API

c2-hunter

Extract C2 Traffic

callbackdump

能过卡巴、defender等杀软的dump lsass进程工具

ccremote

这是一个基于gh0st远程控制的项目，使自己更深入了解远控的原理，采用VS2017，默认分支hijack还在修改不能执行，master分支的项目可以正常的运行的，你可以切换到该分支查看可以执行的代码

chacha20-c

ChaCha20 stream cipher implemented in C

chatviewtool

基于Java实现的图形化微信聊天记录解密查看器

chlonium

Chromium Cookie import / export tool

cinject

Windows Kernel inject (no module no thread)

clrinject

Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.