Merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, allowing for efficient and secure communication between the server and agents. It provides a robust and flexible framework for post-exploitation activities, enabling users to execute commands, upload and download files, and perform other tasks on compromised systems. Merlin's HTTP/2 protocol support ensures efficient and reliable communication, while its Golang implementation provides a lightweight and scalable solution for command and control operations.
FEATURES
ALTERNATIVES
A simple, fast web crawler for discovering endpoints and assets in a web application
A distributed systems and infrastructure simulator for attacking and debugging Kubernetes.
An open-source penetration testing framework for social engineering with custom attack vectors.
CrossC2 enables generation of cross-platform payloads for CobaltStrike, enhancing operational flexibility.
Weaponizing Kerberos protocol flaws for stealthy attacks on domain users.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.