Alternatives and similar repositories for RdpThief:

Users that are interested in RdpThief are comparing it to the libraries listed below

• Mr-Un1k0d3r / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆1,475Updated last year
• outflanknl / Dumpert
  LSASS memory dumper using direct system calls and API unhooking.
  ☆1,521Updated 4 years ago
• phra / PEzor
  Open-Source Shellcode & PE Packer
  ☆1,925Updated last year
• breenmachine / RottenPotatoNG
  New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
  ☆930Updated 7 years ago
• 3xpl01tc0d3r / ProcessInjection
  This program is designed to demonstrate various process injection techniques
  ☆1,124Updated last year
• RythmStick / AMSITrigger
  The Hunt for Malicious Strings
  ☆1,177Updated 2 years ago
• CCob / SweetPotato
  Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019
  ☆1,681Updated 6 months ago
• med0x2e / GadgetToJScript
  A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …
  ☆930Updated 3 years ago
• mandiant / SharPersist
  ☆1,451Updated last year
• the-xentropy / xencrypt
  A PowerShell script anti-virus evasion tool
  ☆1,101Updated 2 years ago
• bats3c / darkarmour
  Windows AV Evasion
  ☆764Updated 4 years ago
• mgeeky / cobalt-arsenal
  My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+
  ☆1,072Updated last year
• GhostPack / SharpDPAPI
  SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
  ☆1,222Updated 8 months ago
• Flangvik / BetterSafetyKatz
  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…
  ☆856Updated 3 years ago
• CCob / SharpBlock
  A method of bypassing EDR's active projection DLL's by preventing entry point exection
  ☆1,135Updated 3 years ago
• GhostPack / SafetyKatz
  SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
  ☆1,251Updated 5 years ago
• b4rtik / SharpKatz
  Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands
  ☆995Updated 3 years ago
• RedCursorSecurityConsulting / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆929Updated 2 years ago
• harleyQu1nn / AggressorScripts
  Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
  ☆1,495Updated last year
• Yaxser / Backstab
  A tool to kill antimalware protected processes
  ☆1,420Updated 3 years ago
• hlldz / Phant0m
  Windows Event Log Killer
  ☆1,776Updated last year
• rasta-mouse / TikiTorch
  Process Injection
  ☆758Updated 3 years ago
• antonioCoco / RoguePotato
  Another Windows Local Privilege Escalation from Service Account to System
  ☆1,074Updated 4 years ago
• 0x09AL / IIS-Raid
  A native backdoor module for Microsoft IIS (Internet Information Services)
  ☆540Updated 4 years ago
• joshfaust / Alaris
  A protective and Low Level Shellcode Loader that defeats modern EDR systems.
  ☆903Updated last year
• aahmad097 / AlternativeShellcodeExec
  Alternative Shellcode Execution Via Callbacks
  ☆1,533Updated 2 years ago
• mgeeky / RedWarden
  Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
  ☆955Updated 2 years ago
• WithSecureLabs / C3
  Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…
  ☆1,581Updated 2 years ago
• jthuraisamy / SysWhispers
  AV/EDR evasion via direct system calls.
  ☆1,851Updated 2 years ago
• FuzzySecurity / Sharp-Suite
  Also known by Microsoft as Knifecoat
  ☆1,128Updated 2 years ago