Alternatives and similar repositories for reg_snake

Users that are interested in reg_snake are comparing it to the libraries listed below

• cybersectroll / TrollDump
  ☆83Updated last year
• 0xthirteen / WMI_Proc_Dump
  Dump processes over WMI with MSFT_MTProcess
  ☆81Updated 3 months ago
• rasta-mouse / SpawnWith
  ☆108Updated 10 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆123Updated last year
• decoder-it / ChgPass
  ☆137Updated 11 months ago
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆89Updated 10 months ago
• xpn / CloudInject
  ☆116Updated last year
• TwoSevenOneT / EDRStartupHinder
  EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.
  ☆99Updated this week
• zarkones / BloodfangC2
  Modern PIC implant for Windows (64 & 32 bit)
  ☆105Updated 5 months ago
• HulkOperator / AuthStager
  ☆59Updated last year
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆119Updated 2 years ago
• nickvourd / Rocabella
  Sniffing files generator
  ☆59Updated 10 months ago
• breakfix / SharpSCOM
  A C# utility for interacting with SCOM
  ☆94Updated last month
• cybersectroll / SharpPersistSD
  ☆92Updated last year
• 0xv1n / RemoteSessionEnum
  Remotely Enumerate sessions using undocumented Windows Station APIs
  ☆118Updated last year
• deh00ni / NtDumpBOF
  ☆100Updated last year
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆75Updated last year
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆94Updated last year
• Leo4j / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆64Updated last year
• 0xRedpoll / SignalKeyBOF
  BOF to decrypt Signal Desktop chat logs
  ☆72Updated 10 months ago
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆100Updated 6 months ago
• nettitude / TokenCert
  TokenCert
  ☆102Updated last year
• nettitude / raccoon
  ☆53Updated 11 months ago
• 0xTriboulet / rssh-rs
  ☆54Updated 7 months ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆84Updated last year
• tijme / conferences
  Some of the presentations, workshops, and labs I gave at public conferences.
  ☆34Updated 2 months ago
• OtterHacker / AWSRedirector
  ☆57Updated 10 months ago
• blackarrowsec / Handly
  Abuse leaked token handles.
  ☆134Updated 2 years ago
• rtecCyberSec / SpeechRuntimeMove
  Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking
  ☆134Updated 6 months ago
• puzzlepeaches / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆34Updated 2 years ago