Alternatives and similar repositories for OwnershipStealer

Users that are interested in OwnershipStealer are comparing it to the libraries listed below

• ADPunisher / Backup-Harvester

  View on GitHub
  ☆20May 1, 2023Updated 2 years ago
• decoder-it / DFSCoerce-exe-2

  View on GitHub
  DFSCoerce exe revisited version with custom authentication
  ☆42Jan 13, 2024Updated 2 years ago
• lkarlslund / hashmuncher

  View on GitHub
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆94May 9, 2023Updated 2 years ago
• RedSiege / SharpCollectionTemplate

  View on GitHub
  ☆14Sep 26, 2023Updated 2 years ago
• MzHmO / PPLDescribe

  View on GitHub
  Tool for obtaining information about PPL processes
  ☆16Feb 12, 2024Updated 2 years ago
• eversinc33 / SharpStartWebclient

  View on GitHub
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆77Feb 8, 2023Updated 3 years ago
• sokaRepo / CoercedPotatoRDLL

  View on GitHub
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆224Nov 23, 2023Updated 2 years ago
• OtterHacker / Cerbere

  View on GitHub
  ☆49Feb 11, 2023Updated 3 years ago
• persistent-security / hermes-the-messenger

  View on GitHub
  A PoC for achieving persistence via push notifications on Windows
  ☆48Jun 9, 2023Updated 2 years ago
• Workingdaturah / BOF-Learning

  View on GitHub
  Cobalt Strike BOFS
  ☆16Dec 20, 2023Updated 2 years ago
• root-at-iyn / Offensive-Security

  View on GitHub
  My journey and notes on learning Offensive Security from the ground up
  ☆21Dec 22, 2025Updated last month
• 4ndr34z / ntlmthief

  View on GitHub
  ☆52Feb 8, 2024Updated 2 years ago
• C0axx / Modified-Thycotic-Secret-Stealer

  View on GitHub
  Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption
  ☆19Aug 5, 2022Updated 3 years ago
• rasta-mouse / MinHook.NET

  View on GitHub
  A C# port of the MinHook API hooking library
  ☆56Oct 5, 2022Updated 3 years ago
• improsec / BackupOperatorToolkit

  View on GitHub
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆178Feb 14, 2023Updated 2 years ago
• blackarrowsec / Handly

  View on GitHub
  Abuse leaked token handles.
  ☆134Dec 14, 2023Updated 2 years ago
• itaymigdal / LOLSpoof

  View on GitHub
  An interactive shell to spoof some LOLBins command line
  ☆188Jan 27, 2024Updated 2 years ago
• wh0amitz / SharpRODC

  View on GitHub
  To audit the security of read-only domain controllers
  ☆118Nov 27, 2023Updated 2 years ago
• 0xe7 / Talks

  View on GitHub
  Talk slides and material
  ☆37Mar 24, 2024Updated last year
• mastercodeon314 / NugetBackdoor

  View on GitHub
  A framework for backdooring Microsoft Nuget packages.
  ☆10Jan 9, 2024Updated 2 years ago
• LuemmelSec / PMP-Decrypter

  View on GitHub
  ☆41Sep 9, 2023Updated 2 years ago
• hackerhouse-opensource / NoFaxGiven

  View on GitHub
  Code Execution & Persistence in NETWORK SERVICE FAX Service
  ☆34Feb 2, 2026Updated last week
• HuskyHacks / SharpTokenFinder

  View on GitHub
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆144Feb 1, 2026Updated last week
• shaddy43 / MalwareAnalysisSeries

  View on GitHub
  This repository contains the analysis reports, technical details or any tools created for helping in malware analysis. Additionally, the …
  ☆23Jun 17, 2025Updated 7 months ago
• redskal / SharpAzbelt

  View on GitHub
  .NET port of Leron Gray's azbelt tool.
  ☆26Sep 21, 2023Updated 2 years ago
• decoder-it / Troopers24

  View on GitHub
  ☆43Jul 9, 2024Updated last year
• yo-yo-yo-jbo / injection_and_hooking_intro

  View on GitHub
  ☆38Apr 7, 2023Updated 2 years ago
• ZeroMemoryEx / Tokenizer

  View on GitHub
  Kernel Mode Driver for Elevating Process Privileges
  ☆134Mar 23, 2023Updated 2 years ago
• mertdas / SharpLateral

  View on GitHub
  Lateral Movement
  ☆125Nov 14, 2023Updated 2 years ago
• Yair-Men / Passenger

  View on GitHub
  ProcExp Driver (Ab)use
  ☆22Dec 28, 2022Updated 3 years ago
• 0xv1n / proc-suspend

  View on GitHub
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆22Mar 26, 2023Updated 2 years ago
• Kharos102 / ReadWriteDriverSample

  View on GitHub
  ☆25Apr 28, 2024Updated last year
• CompassSecurity / PowerLsassSilentProcessExit

  View on GitHub
  ☆27Feb 3, 2026Updated last week
• Print3M / shellcodes

  View on GitHub
  My shellcodes (or shellcodish-things) written for educational purpose in NASM assembly.
  ☆45Jul 23, 2024Updated last year
• Quantumite / slidecode

  View on GitHub
  XOR-based shellcode encoder
  ☆30Apr 20, 2023Updated 2 years ago
• Sq00ky / csharp-portscanner

  View on GitHub
  simple C# portscanner - written for playing around with Metasploit's Execute-Assembly
  ☆10Jul 1, 2023Updated 2 years ago
• mfdooom / threadless_loader_rs

  View on GitHub
  Threadless Injection Payload Toolkit
  ☆12Oct 12, 2023Updated 2 years ago
• ZephrFish / GoogD0rk

  View on GitHub
  ☆43Apr 26, 2025Updated 9 months ago
• whokilleddb / BoosterDriver

  View on GitHub
  A step-by-step walkthrough of how to write a Client and a Driver to communicate with each other and boost the priority of a thread.
  ☆17Dec 12, 2023Updated 2 years ago