├── .gitattributes ├── .github ├── ISSUE_TEMPLATE │ └── bug_report.md └── workflows │ ├── go_dev.yml │ ├── go_main.yml │ ├── qodana.yml │ ├── qodana_pr.yml │ └── release.yml ├── .gitignore ├── .gitmodules ├── .qodana └── qodana.sarif.json ├── Dockerfile ├── LICENSE ├── Makefile ├── README.MD ├── data ├── README.MD ├── agents │ └── README.MD ├── log │ └── README.MD ├── modules │ ├── README.MD │ ├── darwin │ │ └── x64 │ │ │ ├── javascript │ │ │ └── enumeration │ │ │ │ ├── healthinspector.json │ │ │ │ └── orchard.json │ │ │ ├── objective-c │ │ │ └── kerberos │ │ │ │ └── bifrost.json │ │ │ ├── python │ │ │ └── enumeration │ │ │ │ └── venator.json │ │ │ └── swift │ │ │ └── enumeration │ │ │ └── swiftbelt.json │ ├── linux │ │ └── x64 │ │ │ ├── bash │ │ │ ├── credentials │ │ │ │ ├── MimiPenguin.json │ │ │ │ └── SwapDigger.json │ │ │ ├── evasion │ │ │ │ ├── ClearShellHistory.json │ │ │ │ ├── PreventShellHistory.json │ │ │ │ ├── TimestompReference.json │ │ │ │ └── libprocesshider.json │ │ │ ├── exec │ │ │ │ └── bash.json │ │ │ ├── persistence │ │ │ │ ├── CrontabPersistence.json │ │ │ │ └── ShellProfilePersistence.json │ │ │ ├── privesc │ │ │ │ └── LinEnum.json │ │ │ └── troll │ │ │ │ └── Prank.json │ │ │ └── python │ │ │ └── pivoting │ │ │ └── arox.json │ ├── templates │ │ ├── base.json │ │ └── powershell.json │ └── windows │ │ └── x64 │ │ ├── csharp │ │ ├── credentials │ │ │ ├── SafetyKatz.json │ │ │ ├── SharpDump.json │ │ │ └── SharpRoast.json │ │ ├── enumeration │ │ │ └── Seatbelt.json │ │ ├── misc │ │ │ ├── Compiler-CSharp.json │ │ │ └── SharpGen.json │ │ └── privesc │ │ │ └── SharpUp.json │ │ ├── go │ │ ├── credentials │ │ │ └── minidump.json │ │ └── exec │ │ │ ├── createProcess.json │ │ │ ├── donut.json │ │ │ ├── sRDI.json │ │ │ └── shellcodeInjection.json │ │ └── powershell │ │ ├── credentials │ │ ├── Inveigh.json │ │ ├── Invoke-InternalMonologue.json │ │ ├── Invoke-PowerThIEf.json │ │ ├── LaZagneForensic.json │ │ └── dumpCredStore.json │ │ ├── detection │ │ └── Get-InjectedThread.json │ │ ├── enumeration │ │ └── Get-OSTokenInformation.json │ │ ├── exec │ │ └── powershell.json │ │ ├── lateral │ │ ├── dcom │ │ │ ├── Get-ExecutionCommand.json │ │ │ ├── Invoke-DCOM.json │ │ │ ├── Invoke-DCOMObjectScan.json │ │ │ ├── Invoke-DCOMPowerPointPivot.json │ │ │ ├── Invoke-ExcelMacroPivot.json │ │ │ ├── Invoke-ExecutionCommand.json │ │ │ └── Invoke-RegisterRemoteSchema.json │ │ ├── gpo │ │ │ ├── Find-ComputersWithRemoteAccessPolicies.json │ │ │ └── Grouper.json │ │ └── wmi │ │ │ └── Invoke-WMILM.json │ │ ├── persistence │ │ ├── Add-RemoteRegBackdoor.json │ │ ├── Create-HotKeyLNK.json │ │ ├── DSCompromised-Configure-Victim.json │ │ ├── Get-RemoteCachedCredential.json │ │ ├── Get-RemoteLocalAccountHash.json │ │ ├── Get-RemoteMachineAccountHash.json │ │ ├── Get-ScheduledTaskComHandler.json │ │ └── Invoke-ADSBackdoor.json │ │ ├── powersploit │ │ ├── Get-GPPPassword.json │ │ ├── Invoke-Mimikatz.json │ │ └── PowerUp.json │ │ └── privesc │ │ ├── Find-BadPrivilege.json │ │ ├── Find-PotentiallyCrackableAccounts.json │ │ └── psgetsystem.json ├── src │ └── README.MD └── x509 │ └── README.MD ├── docs ├── CHANGELOG.MD ├── CONTRIBUTING.MD ├── ISSUE_TEMPLATE.md ├── PULL_REQUEST_TEMPLATE.md └── images │ ├── icon-goland.png │ ├── jetbrains-variant-4.png │ ├── merlin-horizontal.png │ └── merlin.png ├── go.mod ├── go.sum ├── main.go └── pkg ├── README.MD ├── agents ├── agents.go ├── memory │ └── memory.go ├── repository.go └── structs.go ├── authenticators ├── authenticators.go ├── none │ └── none.go └── opaque │ └── opaque.go ├── client ├── client.go ├── memory │ └── memory.go ├── message │ ├── memory │ │ └── memory.go │ ├── message.go │ └── repository.go └── repository.go ├── core └── core.go ├── delegate ├── memory │ └── memory.go └── repository.go ├── group ├── memory │ └── memory.go └── repository.go ├── jobs ├── jobs.go ├── memory │ └── memory.go └── repository.go ├── listeners ├── http │ ├── http.go │ ├── jwt.go │ ├── memory │ │ └── memory.go │ └── repository.go ├── listeners.go ├── smb │ ├── memory │ │ └── memory.go │ ├── repository.go │ └── smb.go ├── tcp │ ├── memory │ │ └── memory.go │ ├── repository.go │ └── tcp.go └── udp │ ├── memory │ └── memory.go │ ├── repository.go │ └── udp.go ├── logging └── logging.go ├── merlin.go ├── modules ├── donut │ └── donut.go ├── minidump │ └── minidump.go ├── modules.go ├── sharpgen │ └── sharpgen.go ├── shellcode │ └── shellcode.go ├── socks │ └── socks.go ├── srdi │ └── srdi.go └── winapi │ └── createprocess │ └── createProcess.go ├── opaque └── opaque.go ├── rpc ├── rpc.pb.go ├── rpc.proto └── rpc_grpc.pb.go ├── servers ├── http │ ├── handler.go │ ├── http.go │ ├── jwt.go │ ├── memory │ │ └── memory.go │ ├── repository.go │ ├── tls.go │ └── tls_test.go └── servers.go ├── services ├── agent │ └── agent.go ├── client │ └── client.go ├── job │ └── job.go ├── listeners │ └── listeners.go ├── message │ └── message.go └── rpc │ ├── agent.go │ ├── agentService.go │ ├── job.go │ ├── listener.go │ ├── module.go │ └── rpc.go └── transformer ├── encoders ├── base64 │ └── base64.go ├── gob │ └── gob.go └── hex │ └── hex.go ├── encrypters ├── aes │ └── aes.go ├── jwe │ └── jwe.go ├── rc4 │ └── rc4.go └── xor │ └── xor.go └── transformer.go /.gitattributes: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.gitattributes -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.github/ISSUE_TEMPLATE/bug_report.md -------------------------------------------------------------------------------- /.github/workflows/go_dev.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.github/workflows/go_dev.yml -------------------------------------------------------------------------------- /.github/workflows/go_main.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.github/workflows/go_main.yml -------------------------------------------------------------------------------- /.github/workflows/qodana.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.github/workflows/qodana.yml -------------------------------------------------------------------------------- /.github/workflows/qodana_pr.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.github/workflows/qodana_pr.yml -------------------------------------------------------------------------------- /.github/workflows/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.github/workflows/release.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.gitmodules -------------------------------------------------------------------------------- /.qodana/qodana.sarif.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/.qodana/qodana.sarif.json -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/Makefile -------------------------------------------------------------------------------- /README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/README.MD -------------------------------------------------------------------------------- /data/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/README.MD -------------------------------------------------------------------------------- /data/agents/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/agents/README.MD -------------------------------------------------------------------------------- /data/log/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/log/README.MD -------------------------------------------------------------------------------- /data/modules/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/README.MD -------------------------------------------------------------------------------- /data/modules/darwin/x64/javascript/enumeration/healthinspector.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/darwin/x64/javascript/enumeration/healthinspector.json -------------------------------------------------------------------------------- /data/modules/darwin/x64/javascript/enumeration/orchard.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/darwin/x64/javascript/enumeration/orchard.json -------------------------------------------------------------------------------- /data/modules/darwin/x64/objective-c/kerberos/bifrost.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/darwin/x64/objective-c/kerberos/bifrost.json -------------------------------------------------------------------------------- /data/modules/darwin/x64/python/enumeration/venator.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/darwin/x64/python/enumeration/venator.json -------------------------------------------------------------------------------- /data/modules/darwin/x64/swift/enumeration/swiftbelt.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/darwin/x64/swift/enumeration/swiftbelt.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/credentials/MimiPenguin.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/credentials/MimiPenguin.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/credentials/SwapDigger.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/credentials/SwapDigger.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/evasion/ClearShellHistory.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/evasion/ClearShellHistory.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/evasion/PreventShellHistory.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/evasion/PreventShellHistory.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/evasion/TimestompReference.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/evasion/TimestompReference.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/evasion/libprocesshider.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/evasion/libprocesshider.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/exec/bash.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/exec/bash.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/persistence/CrontabPersistence.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/persistence/CrontabPersistence.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/persistence/ShellProfilePersistence.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/persistence/ShellProfilePersistence.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/privesc/LinEnum.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/privesc/LinEnum.json -------------------------------------------------------------------------------- /data/modules/linux/x64/bash/troll/Prank.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/bash/troll/Prank.json -------------------------------------------------------------------------------- /data/modules/linux/x64/python/pivoting/arox.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/linux/x64/python/pivoting/arox.json -------------------------------------------------------------------------------- /data/modules/templates/base.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/templates/base.json -------------------------------------------------------------------------------- /data/modules/templates/powershell.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/templates/powershell.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/credentials/SafetyKatz.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/credentials/SafetyKatz.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/credentials/SharpDump.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/credentials/SharpDump.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/credentials/SharpRoast.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/credentials/SharpRoast.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/enumeration/Seatbelt.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/enumeration/Seatbelt.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/misc/Compiler-CSharp.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/misc/Compiler-CSharp.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/misc/SharpGen.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/misc/SharpGen.json -------------------------------------------------------------------------------- /data/modules/windows/x64/csharp/privesc/SharpUp.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/csharp/privesc/SharpUp.json -------------------------------------------------------------------------------- /data/modules/windows/x64/go/credentials/minidump.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/go/credentials/minidump.json -------------------------------------------------------------------------------- /data/modules/windows/x64/go/exec/createProcess.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/go/exec/createProcess.json -------------------------------------------------------------------------------- /data/modules/windows/x64/go/exec/donut.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/go/exec/donut.json -------------------------------------------------------------------------------- /data/modules/windows/x64/go/exec/sRDI.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/go/exec/sRDI.json -------------------------------------------------------------------------------- /data/modules/windows/x64/go/exec/shellcodeInjection.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/go/exec/shellcodeInjection.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/credentials/Inveigh.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/credentials/Inveigh.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/credentials/Invoke-InternalMonologue.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/credentials/Invoke-InternalMonologue.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/credentials/Invoke-PowerThIEf.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/credentials/Invoke-PowerThIEf.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/credentials/LaZagneForensic.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/credentials/LaZagneForensic.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/credentials/dumpCredStore.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/credentials/dumpCredStore.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/detection/Get-InjectedThread.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/detection/Get-InjectedThread.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/enumeration/Get-OSTokenInformation.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/enumeration/Get-OSTokenInformation.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/exec/powershell.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/exec/powershell.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Get-ExecutionCommand.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Get-ExecutionCommand.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Invoke-DCOM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Invoke-DCOM.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Invoke-DCOMObjectScan.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Invoke-DCOMObjectScan.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Invoke-DCOMPowerPointPivot.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Invoke-DCOMPowerPointPivot.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Invoke-ExcelMacroPivot.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Invoke-ExcelMacroPivot.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Invoke-ExecutionCommand.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Invoke-ExecutionCommand.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/dcom/Invoke-RegisterRemoteSchema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/dcom/Invoke-RegisterRemoteSchema.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/gpo/Find-ComputersWithRemoteAccessPolicies.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/gpo/Find-ComputersWithRemoteAccessPolicies.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/gpo/Grouper.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/gpo/Grouper.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/lateral/wmi/Invoke-WMILM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/lateral/wmi/Invoke-WMILM.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Add-RemoteRegBackdoor.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Add-RemoteRegBackdoor.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Create-HotKeyLNK.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Create-HotKeyLNK.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/DSCompromised-Configure-Victim.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/DSCompromised-Configure-Victim.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Get-RemoteCachedCredential.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Get-RemoteCachedCredential.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Get-RemoteLocalAccountHash.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Get-RemoteLocalAccountHash.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Get-RemoteMachineAccountHash.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Get-RemoteMachineAccountHash.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Get-ScheduledTaskComHandler.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Get-ScheduledTaskComHandler.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/persistence/Invoke-ADSBackdoor.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/persistence/Invoke-ADSBackdoor.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/powersploit/Get-GPPPassword.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/powersploit/Get-GPPPassword.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/powersploit/Invoke-Mimikatz.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/powersploit/Invoke-Mimikatz.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/powersploit/PowerUp.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/powersploit/PowerUp.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/privesc/Find-BadPrivilege.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/privesc/Find-BadPrivilege.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/privesc/Find-PotentiallyCrackableAccounts.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/privesc/Find-PotentiallyCrackableAccounts.json -------------------------------------------------------------------------------- /data/modules/windows/x64/powershell/privesc/psgetsystem.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/modules/windows/x64/powershell/privesc/psgetsystem.json -------------------------------------------------------------------------------- /data/src/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/src/README.MD -------------------------------------------------------------------------------- /data/x509/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/data/x509/README.MD -------------------------------------------------------------------------------- /docs/CHANGELOG.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/CHANGELOG.MD -------------------------------------------------------------------------------- /docs/CONTRIBUTING.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/CONTRIBUTING.MD -------------------------------------------------------------------------------- /docs/ISSUE_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/ISSUE_TEMPLATE.md -------------------------------------------------------------------------------- /docs/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /docs/images/icon-goland.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/images/icon-goland.png -------------------------------------------------------------------------------- /docs/images/jetbrains-variant-4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/images/jetbrains-variant-4.png -------------------------------------------------------------------------------- /docs/images/merlin-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/images/merlin-horizontal.png -------------------------------------------------------------------------------- /docs/images/merlin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/docs/images/merlin.png -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/go.sum -------------------------------------------------------------------------------- /main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/main.go -------------------------------------------------------------------------------- /pkg/README.MD: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/README.MD -------------------------------------------------------------------------------- /pkg/agents/agents.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/agents/agents.go -------------------------------------------------------------------------------- /pkg/agents/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/agents/memory/memory.go -------------------------------------------------------------------------------- /pkg/agents/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/agents/repository.go -------------------------------------------------------------------------------- /pkg/agents/structs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/agents/structs.go -------------------------------------------------------------------------------- /pkg/authenticators/authenticators.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/authenticators/authenticators.go -------------------------------------------------------------------------------- /pkg/authenticators/none/none.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/authenticators/none/none.go -------------------------------------------------------------------------------- /pkg/authenticators/opaque/opaque.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/authenticators/opaque/opaque.go -------------------------------------------------------------------------------- /pkg/client/client.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/client/client.go -------------------------------------------------------------------------------- /pkg/client/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/client/memory/memory.go -------------------------------------------------------------------------------- /pkg/client/message/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/client/message/memory/memory.go -------------------------------------------------------------------------------- /pkg/client/message/message.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/client/message/message.go -------------------------------------------------------------------------------- /pkg/client/message/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/client/message/repository.go -------------------------------------------------------------------------------- /pkg/client/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/client/repository.go -------------------------------------------------------------------------------- /pkg/core/core.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/core/core.go -------------------------------------------------------------------------------- /pkg/delegate/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/delegate/memory/memory.go -------------------------------------------------------------------------------- /pkg/delegate/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/delegate/repository.go -------------------------------------------------------------------------------- /pkg/group/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/group/memory/memory.go -------------------------------------------------------------------------------- /pkg/group/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/group/repository.go -------------------------------------------------------------------------------- /pkg/jobs/jobs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/jobs/jobs.go -------------------------------------------------------------------------------- /pkg/jobs/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/jobs/memory/memory.go -------------------------------------------------------------------------------- /pkg/jobs/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/jobs/repository.go -------------------------------------------------------------------------------- /pkg/listeners/http/http.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/http/http.go -------------------------------------------------------------------------------- /pkg/listeners/http/jwt.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/http/jwt.go -------------------------------------------------------------------------------- /pkg/listeners/http/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/http/memory/memory.go -------------------------------------------------------------------------------- /pkg/listeners/http/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/http/repository.go -------------------------------------------------------------------------------- /pkg/listeners/listeners.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/listeners.go -------------------------------------------------------------------------------- /pkg/listeners/smb/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/smb/memory/memory.go -------------------------------------------------------------------------------- /pkg/listeners/smb/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/smb/repository.go -------------------------------------------------------------------------------- /pkg/listeners/smb/smb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/smb/smb.go -------------------------------------------------------------------------------- /pkg/listeners/tcp/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/tcp/memory/memory.go -------------------------------------------------------------------------------- /pkg/listeners/tcp/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/tcp/repository.go -------------------------------------------------------------------------------- /pkg/listeners/tcp/tcp.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/tcp/tcp.go -------------------------------------------------------------------------------- /pkg/listeners/udp/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/udp/memory/memory.go -------------------------------------------------------------------------------- /pkg/listeners/udp/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/udp/repository.go -------------------------------------------------------------------------------- /pkg/listeners/udp/udp.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/listeners/udp/udp.go -------------------------------------------------------------------------------- /pkg/logging/logging.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/logging/logging.go -------------------------------------------------------------------------------- /pkg/merlin.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/merlin.go -------------------------------------------------------------------------------- /pkg/modules/donut/donut.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/donut/donut.go -------------------------------------------------------------------------------- /pkg/modules/minidump/minidump.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/minidump/minidump.go -------------------------------------------------------------------------------- /pkg/modules/modules.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/modules.go -------------------------------------------------------------------------------- /pkg/modules/sharpgen/sharpgen.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/sharpgen/sharpgen.go -------------------------------------------------------------------------------- /pkg/modules/shellcode/shellcode.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/shellcode/shellcode.go -------------------------------------------------------------------------------- /pkg/modules/socks/socks.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/socks/socks.go -------------------------------------------------------------------------------- /pkg/modules/srdi/srdi.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/srdi/srdi.go -------------------------------------------------------------------------------- /pkg/modules/winapi/createprocess/createProcess.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/modules/winapi/createprocess/createProcess.go -------------------------------------------------------------------------------- /pkg/opaque/opaque.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/opaque/opaque.go -------------------------------------------------------------------------------- /pkg/rpc/rpc.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/rpc/rpc.pb.go -------------------------------------------------------------------------------- /pkg/rpc/rpc.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/rpc/rpc.proto -------------------------------------------------------------------------------- /pkg/rpc/rpc_grpc.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/rpc/rpc_grpc.pb.go -------------------------------------------------------------------------------- /pkg/servers/http/handler.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/handler.go -------------------------------------------------------------------------------- /pkg/servers/http/http.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/http.go -------------------------------------------------------------------------------- /pkg/servers/http/jwt.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/jwt.go -------------------------------------------------------------------------------- /pkg/servers/http/memory/memory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/memory/memory.go -------------------------------------------------------------------------------- /pkg/servers/http/repository.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/repository.go -------------------------------------------------------------------------------- /pkg/servers/http/tls.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/tls.go -------------------------------------------------------------------------------- /pkg/servers/http/tls_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/http/tls_test.go -------------------------------------------------------------------------------- /pkg/servers/servers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/servers/servers.go -------------------------------------------------------------------------------- /pkg/services/agent/agent.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/agent/agent.go -------------------------------------------------------------------------------- /pkg/services/client/client.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/client/client.go -------------------------------------------------------------------------------- /pkg/services/job/job.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/job/job.go -------------------------------------------------------------------------------- /pkg/services/listeners/listeners.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/listeners/listeners.go -------------------------------------------------------------------------------- /pkg/services/message/message.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/message/message.go -------------------------------------------------------------------------------- /pkg/services/rpc/agent.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/rpc/agent.go -------------------------------------------------------------------------------- /pkg/services/rpc/agentService.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/rpc/agentService.go -------------------------------------------------------------------------------- /pkg/services/rpc/job.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/rpc/job.go -------------------------------------------------------------------------------- /pkg/services/rpc/listener.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/rpc/listener.go -------------------------------------------------------------------------------- /pkg/services/rpc/module.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/rpc/module.go -------------------------------------------------------------------------------- /pkg/services/rpc/rpc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/services/rpc/rpc.go -------------------------------------------------------------------------------- /pkg/transformer/encoders/base64/base64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encoders/base64/base64.go -------------------------------------------------------------------------------- /pkg/transformer/encoders/gob/gob.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encoders/gob/gob.go -------------------------------------------------------------------------------- /pkg/transformer/encoders/hex/hex.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encoders/hex/hex.go -------------------------------------------------------------------------------- /pkg/transformer/encrypters/aes/aes.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encrypters/aes/aes.go -------------------------------------------------------------------------------- /pkg/transformer/encrypters/jwe/jwe.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encrypters/jwe/jwe.go -------------------------------------------------------------------------------- /pkg/transformer/encrypters/rc4/rc4.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encrypters/rc4/rc4.go -------------------------------------------------------------------------------- /pkg/transformer/encrypters/xor/xor.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/encrypters/xor/xor.go -------------------------------------------------------------------------------- /pkg/transformer/transformer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ne0nd0g/merlin/HEAD/pkg/transformer/transformer.go --------------------------------------------------------------------------------