Alternatives and similar repositories for Xll-Payload-Generator:

Users that are interested in Xll-Payload-Generator are comparing it to the libraries listed below

• Tylous / File-Smuggling
  HTML smuggling is not an evil, it can be useful
  ☆13Updated 2 years ago
• gerbsec / SmokeyObfuscator
  Rewrite to fit my needs
  ☆27Updated 6 months ago
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆33Updated 8 months ago
• CompassSecurity / TokenPhisher
  ☆24Updated last year
• Leo4j / Invoke-ShareHunter
  Enumerate the Domain for Readable and Writable Shares
  ☆16Updated 7 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆38Updated last year
• duckbillsecurity / pdf-smuggler
  Create PDFs with HTML smuggling attachments that save on opening the document.
  ☆29Updated last year
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆28Updated 10 months ago
• heartburn-dev / PKI-Escalate
  Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…
  ☆25Updated last year
• outflanknl / RedELK-workshop
  Items related to the RedELK workshop given at security conferences
  ☆27Updated last year
• GeisericII / Winpacket
  Impacket pre-compiled binaries
  ☆15Updated last year
• Tylous / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆21Updated last year
• MythicAgents / scarecrow_wrapper
  ☆16Updated 3 months ago
• p4p1 / havoc-reporter
  A havoc UI python module to help in reporting and vulnerabilities to exploit on an internal network.
  ☆12Updated last year
• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆55Updated last year
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated 6 months ago
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆68Updated 8 months ago
• EvilBytecode / Lifetime-AmsiBypass
  Lifetime AMSI bypass.
  ☆35Updated 7 months ago
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆33Updated 2 months ago
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆71Updated last year
• RWXstoned / GimmeShelter
  Situational Awareness script to identify how and where to run implants
  ☆43Updated last month
• Hacker-Hermanos / NetRunners
  Reflective shellcode runners using obfuscated Win32 APIs in C# and C++ (GetProcAddress & GetModuleHandle). For penetration testing.
  ☆11Updated 9 months ago
• mfdooom / threadless_loader_rs
  Threadless Injection Payload Toolkit
  ☆11Updated last year
• AonCyberLabs / DUALITY
  ☆15Updated 11 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆39Updated 2 months ago
• kapellos / VladimiRED
  ☆16Updated last month
• Hubbl3 / ThreatCheck
  Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
  ☆12Updated 8 months ago