Alternatives and similar repositories for blindsight

Users that are interested in blindsight are comparing it to the libraries listed below

• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆187Updated 8 months ago
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆232Updated 11 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆220Updated 8 months ago
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆422Updated 6 months ago
• quarkslab / proxyblob
  SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication.
  ☆257Updated 8 months ago
• BlackSnufkin / NyxInvoke
  NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…
  ☆230Updated 11 months ago
• trickster0 / NamelessC2
  Nameless C2 - A C2 with all its components written in Rust
  ☆283Updated last year
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆214Updated last year
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆190Updated last year
• Tylous / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆195Updated last year
• NtDallas / Svartalfheim
  Stage 0
  ☆168Updated last year
• deepinstinct / DCOMUploadExec
  DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
  ☆378Updated last year
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆153Updated 5 months ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆194Updated last year
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆214Updated 2 months ago
• cybersectroll / TrollAMSI
  ☆186Updated 7 months ago
• boku7 / StringReaper
  Reaping treasures from strings in remote processes memory
  ☆284Updated 11 months ago
• ZERODETECTION / MSC_Dropper
  ☆242Updated last year
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆257Updated last year
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆153Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆240Updated 2 years ago
• jakobfriedl / conquest
  Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
  ☆250Updated this week
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆263Updated 9 months ago
• vari-sh / RedTeamGrimoire
  🔥📜 Forbidden collection of Red Team sorcery 📜🔥
  ☆314Updated last week
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆265Updated 3 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆164Updated 5 months ago
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆227Updated last year
• Friends-Security / SharpExclusionFinder
  Tool designed to find folder exclusions using Windows Defender using command line utility MpCmdRun.exe as a low privileged user, without …
  ☆230Updated last year
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆277Updated 10 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆211Updated last year