Alternatives and similar repositories for Killer:

Users that are interested in Killer are comparing it to the libraries listed below

• ZeroMemoryEx / Terminator
  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
  ☆947Updated last year
• assume-breach / Home-Grown-Red-Team
  ☆697Updated 11 months ago
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,185Updated last year
• lem0nSec / ShellGhost
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆1,168Updated last year
• SaadAhla / FilelessPELoader
  Loading Remote AES Encrypted PE in memory , Decrypted it and run it
  ☆916Updated last year
• icyguider / Shhhloader
  Syscall Shellcode Loader (Work in Progress)
  ☆1,161Updated 9 months ago
• RedSiege / GraphStrike
  Cobalt Strike HTTPS beaconing over Microsoft Graph API
  ☆567Updated 8 months ago
• Sh3lldon / FullBypass
  A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…
  ☆659Updated 9 months ago
• kyleavery / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆905Updated 8 months ago
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆899Updated 8 months ago
• VirtualAlllocEx / DEFCON-31-Syscalls-Workshop
  Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
  ☆650Updated last year
• vxCrypt0r / Voidgate
  A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…
  ☆511Updated 8 months ago
• ZeroMemoryEx / Blackout
  kill anti-malware protected processes ( BYOVD) ( Microsoft Won)
  ☆923Updated last year
• SaadAhla / Shellcode-Hide
  This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp…
  ☆412Updated last year
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆630Updated 4 months ago
• nickvourd / Supernova
  Real fucking shellcode encryptor & obfuscator tool
  ☆809Updated this week
• Xre0uS / MultiDump
  MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.
  ☆507Updated 6 months ago
• wh0amitz / PetitPotato
  Local privilege escalation via PetitPotam (Abusing impersonate privileges).
  ☆424Updated last year
• tastypepperoni / PPLBlade
  Protected Process Dumper Tool
  ☆532Updated last year
• wsummerhill / C2_RedTeam_CheatSheets
  Useful C2 techniques and cheatsheets learned from engagements
  ☆465Updated 4 months ago
• antonioCoco / JuicyPotatoNG
  Another Windows Local Privilege Escalation from Service Account to System
  ☆833Updated 2 years ago
• sinfulz / JustEvadeBro
  JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.
  ☆306Updated 6 months ago
• WKL-Sec / HiddenDesktop
  HVNC for Cobalt Strike
  ☆1,188Updated last year
• georgesotiriadis / Chimera
  Automated DLL Sideloading Tool With EDR Evasion Capabilities
  ☆471Updated last year
• r4wd3r / Suborner
  ☆468Updated 3 months ago
• helviojunior / hookchain
  HookChain: A new perspective for Bypassing EDR Solutions
  ☆496Updated last month
• Bl4ckM1rror / FUD-UUID-Shellcode
  ☆324Updated last year
• mgeeky / RedWarden
  Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
  ☆952Updated 2 years ago
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆464Updated last year
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,019Updated last year