Malleable C2 Profile Generator
Malleable C2 profiles for Cobalt Strike/Sliver/Havoc: 20+ service-mimicking templates, randomization engine, JARM-aware TLS and syntax validation.
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
SOCKS5 Proxy Pivoting Module
SOCKS5 proxy server with real RFC 1928 support for TCP and UDP ASSOCIATE (client endpoint tracking per datagram). Written in C, cross-compiles for glibc, musl,
Process Injection Techniques Library
Header-only C library for Windows x64 with 8 real injection techniques. injection_lib.h — header-only library (all 8 techniques + syscall stubs + decoder stub)
Phishing Infrastructure Deployer
Phishing infrastructure deployer with REAL Terraform modules for AWS (EC2 + Route53), DigitalOcean (Droplet + Firewall + Domain) and Linode (instance + firewall
BOF Collection for Cobalt Strike
13 Cobalt Strike Beacon Object Files that compile with mingw-w64 x64 as-is: nanodump, get-system, keylogger, persistence and more, with source and build scripts
Active Directory Enumeration Script
Import-Module .\Invoke-ADEnum.ps1 Uses standard LDAP queries (blends with normal AD traffic) No SAMR/DRSUAPI calls Configurable page size to avoid large result
Kerberoast Extractor
hashcat -m 13100 kerberoast_hashes.txt rockyou.txt LDAP enumeration of all SPN accounts (with admin flag detection) TGS ticket request via raw Kerberos protocol
NTLM Relay Attack Module
NTLM relay toolkit with REAL SPNEGO (BER TLV NegTokenInit/Resp), a raw SMB2 client (negotiate + session_setup with ParseChallenge), LDAP SASL NTLM bind and HTTP