Alternatives and similar repositories for ETW-Bypass-Rust:

Users that are interested in ETW-Bypass-Rust are comparing it to the libraries listed below

• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆39Updated 2 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆38Updated last year
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated 8 months ago
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• affix / rusty-hollow
  Unix Process hollowing in rust
  ☆20Updated last month
• OffenseTeacher / Steganim
  ☆47Updated last year
• AonCyberLabs / DUALITY
  ☆15Updated 11 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• rasta-mouse / KerbApp
  ☆28Updated 7 months ago
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆45Updated last year
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆17Updated last year
• CompassSecurity / TokenPhisher
  ☆24Updated last year
• 0xv1n / Havoc-ProfileGenerator
  malleable profile generator GUI for Havoc
  ☆56Updated last year
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆38Updated 6 months ago
• kapellos / VladimiRED
  ☆16Updated last month
• gerbsec / SmokeyObfuscator
  Rewrite to fit my needs
  ☆27Updated 6 months ago
• OtterHacker / Cerbere
  ☆46Updated last year
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆27Updated 6 months ago
• xpn / adfstoolkit
  ☆16Updated 3 weeks ago
• jojonas / SharpSAMDump
  SAM Dumping in C#
  ☆40Updated 2 weeks ago
• outflanknl / RedELK-workshop
  Items related to the RedELK workshop given at security conferences
  ☆27Updated last year
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆22Updated 2 months ago
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆44Updated last year
• djackreuter / proc_noprocdump
  Dump LSASS by spoofing command line arguments to procdump.
  ☆19Updated 3 months ago
• Teach2Breach / Red_Team_Rust
  Collection of Rust repos useful for Red Teamers.
  ☆31Updated 2 years ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated 6 months ago
• Krypteria / Proxll
  Tool designed to simplify the generation of proxy DLLs while addressing common conflicts related to windows.h
  ☆35Updated 3 months ago
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆33Updated 8 months ago
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆18Updated 2 years ago