Alternatives and similar repositories for Backup-Harvester

Users that are interested in Backup-Harvester are comparing it to the libraries listed below

• ADPunisher / OwnershipStealer

  View on GitHub
  ☆27May 1, 2023Updated 2 years ago
• mastercodeon314 / NugetBackdoor

  View on GitHub
  A framework for backdooring Microsoft Nuget packages.
  ☆10Jan 9, 2024Updated 2 years ago
• shlyuz / teamserver

  View on GitHub
  ☆12Jun 22, 2022Updated 3 years ago
• rbmm / DirectSysCall

  View on GitHub
  ☆12Jul 2, 2023Updated 2 years ago
• cfalta / PoshRandom

  View on GitHub
  A not-at-all-ordered compilation of random security-related powershell scripts :-)
  ☆12Feb 24, 2022Updated 3 years ago
• rbmm / Noname

  View on GitHub
  really ?
  ☆12Feb 29, 2024Updated last year
• MzHmO / PPLDescribe

  View on GitHub
  Tool for obtaining information about PPL processes
  ☆16Feb 12, 2024Updated 2 years ago
• rbmm / Hollowed-Process

  View on GitHub
  ☆30Aug 24, 2025Updated 5 months ago
• eversinc33 / UnXorStringsNet

  View on GitHub
  Deobfuscation of XorStringsNet
  ☆14Nov 5, 2024Updated last year
• cpu0x00 / EternelSuspention

  View on GitHub
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Jul 12, 2024Updated last year
• EgeBalci / syscall_api

  View on GitHub
  ☆38Jun 5, 2023Updated 2 years ago
• wsummerhill / IPv4Fuscation-Encrypted

  View on GitHub
  ☆20Mar 21, 2024Updated last year
• Flawww / NtSyscaller

  View on GitHub
  Manually perform syscalls without going through any external API or DLL.
  ☆19Apr 19, 2023Updated 2 years ago
• C0axx / Modified-Thycotic-Secret-Stealer

  View on GitHub
  Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption
  ☆19Aug 5, 2022Updated 3 years ago
• NVISOsecurity / cs2br-bof

  View on GitHub
  Run Cobalt Strike BOFs in Brute Ratel C4!
  ☆86Apr 15, 2025Updated 10 months ago
• Orange-Cyberdefense / leHACK-2022

  View on GitHub
  ☆17Jul 1, 2022Updated 3 years ago
• eversinc33 / SharpStartWebclient

  View on GitHub
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆77Feb 8, 2023Updated 3 years ago
• hackedteam / melter

  View on GitHub
  command line melter
  ☆18Jul 6, 2015Updated 10 years ago
• gavz / hidden-cry

  View on GitHub
  Windows Crypter/Decrypter Generator with AES 256 bits key - Fully Undetectable (FUD)
  ☆17May 18, 2020Updated 5 years ago
• Leo4j / SessionExec

  View on GitHub
  Execute commands in other Sessions
  ☆91Jul 29, 2024Updated last year
• shaddy43 / MalwareAnalysisSeries

  View on GitHub
  This repository contains the analysis reports, technical details or any tools created for helping in malware analysis. Additionally, the …
  ☆23Jun 17, 2025Updated 7 months ago
• aress31 / clm-rout

  View on GitHub
  A C# program featuring an all-in-one bypass for CLM, AppLocker and AMSI using Runspace.
  ☆21Jul 31, 2022Updated 3 years ago
• p0dalirius / pyDescribeNTSecurityDescriptor

  View on GitHub
  A python tool to parse and describe the contents of a raw ntSecurityDescriptor structure.
  ☆28Aug 18, 2025Updated 5 months ago
• WKL-Sec / Winsocky

  View on GitHub
  Winsocket for Cobalt Strike.
  ☆102Jul 6, 2023Updated 2 years ago
• AetherBlack / abuseACL

  View on GitHub
  A python script to automatically list vulnerable Windows ACEs/ACLs.
  ☆62Jun 25, 2025Updated 7 months ago
• Quantumite / slidecode

  View on GitHub
  XOR-based shellcode encoder
  ☆30Apr 20, 2023Updated 2 years ago
• alfarom256 / LogMeInPoCHandleDup

  View on GitHub
  ☆64Feb 5, 2024Updated 2 years ago
• susMdT / effective-waffle

  View on GitHub
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69May 11, 2023Updated 2 years ago
• pwnsauc3 / RWXfinder

  View on GitHub
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆111Jul 15, 2023Updated 2 years ago
• V3ded / ToolDump-v1

  View on GitHub
  Some of my custom "tools".
  ☆28Feb 21, 2022Updated 3 years ago
• termanix / TokenElevation

  View on GitHub
  Token Elevation to authorized user as SYSTEM or Domain Admins
  ☆25Nov 22, 2025Updated 2 months ago
• rkbennett / pyThreadlessInject

  View on GitHub
  A python port of CCob's ThreadlessInject
  ☆25Mar 18, 2023Updated 2 years ago
• itaymigdal / LOLSpoof

  View on GitHub
  An interactive shell to spoof some LOLBins command line
  ☆188Jan 27, 2024Updated 2 years ago
• Kharos102 / interceptor

  View on GitHub
  Sample Rust Hooking Engine
  ☆36Apr 5, 2024Updated last year
• ph3n1x007 / EarlyBirdNTDLL

  View on GitHub
  ☆37Feb 11, 2023Updated 3 years ago
• 7h3w4lk3r / Kill-Floor

  View on GitHub
  AV/EDR killer using BYOVD technique
  ☆43Sep 27, 2024Updated last year
• 0xNinjaCyclone / IATUnhooker

  View on GitHub
  IAT Unhooking proof-of-concept
  ☆34Apr 7, 2024Updated last year
• foxlox / hypobrychium

  View on GitHub
  Duplicate not owned Token from Running Process
  ☆74Jul 21, 2023Updated 2 years ago
• Faran-17 / EarlyBird-APC-Injection

  View on GitHub
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆35Oct 31, 2023Updated 2 years ago