Ne0nd0g

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

merlin-agent

Post-exploitation agent for Merlin

go-clr

A PoC package for hosting the CLR and executing .NET from Go

merlin-agent-dll

shellbot

Slack/Microsoft Teams notification for new Empire/Meterpreter checkins

winhttp

A library to make HTTP requests with the Windows winhttp API

merlin-cli

gRPC client for the Merlin Server

go-coff

Load and execute a common object file format (COFF) in the current process

merlin-docker

Base Docker container image for Merlin

oddments

gophish

Open-Source Phishing Toolkit

AggressorScripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

ja3transport

Impersonating JA3 signatures

FlyingAFalseFlag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

merlin-documentation

Merlin C2 Documentation Repository for https://merlin-c2.readthedocs.io

merlin-prism

sliver

Implant framework

gopaque

Go implementation of OPAQUE (hidden password user registration and auth)

MythicContainer

GoLang package for creating Mythic Payload Types, C2 Profiles, Translation Services, WebHook listeners, and Loggers

npipe

A Windows named pipe implementation written in pure Go.

presentations

SpecterOps Presentations

ADFSDump

go-donut

Donut Injector ported to pure Go. For use with https://github.com/TheWover/donut

keyctl

A Go-lang interface to the linux kernel keyring api

merlin-message

Messages exchanged between a Merlin Server and Agent

Mythic_Docker_Templates

Templates and code for Dockerfiles with images hosted at https://hub.docker.com/u/itsafeaturemythic

poseidon

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

SwiftBelt

A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool.