Ne0nd0g

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

merlin-agent

Post-exploitation agent for Merlin

go-clr

A PoC package for hosting the CLR and executing .NET from Go

merlin-agent-dll

ADPasswordHealth

A tool to evaluate the password health of Active Directory accounts.

go-coff

Load and execute a common object file format (COFF) in the current process

shellbot

Slack/Microsoft Teams notification for new Empire/Meterpreter checkins

winhttp

A library to make HTTP requests with the Windows winhttp API

merlin-cli

gRPC client for the Merlin Server

scripts

Miscellaneous for various things

merlin-docker

Base Docker container image for Merlin

oddments

gophish

Open-Source Phishing Toolkit

ja3transport

Impersonating JA3 signatures

merlin-documentation

Merlin C2 Documentation Repository for https://merlin-c2.readthedocs.io

FlyingAFalseFlag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

merlin-prism

npipe

A Windows named pipe implementation written in pure Go.

ADFSDump

go-donut

Donut Injector ported to pure Go. For use with https://github.com/TheWover/donut

keyctl

A Go-lang interface to the linux kernel keyring api

merlin-docker-mythic

Dockerfile for the Merlin container on the Mythic platform

merlin-message

Messages exchanged between a Merlin Server and Agent

Mythic_Docker_Templates

Templates and code for Dockerfiles with images hosted at https://hub.docker.com/u/itsafeaturemythic

MythicContainer

GoLang package for creating Mythic Payload Types, C2 Profiles, Translation Services, WebHook listeners, and Loggers

poseidon

presentations

SpecterOps Presentations

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

SwiftBelt

A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool.