Alternatives and similar repositories for AARO-Bugs:

Users that are interested in AARO-Bugs are comparing it to the libraries listed below

• MinatoTW / CLMBypassBlogpost
  This code was used for the blogpost on secjuice.
  ☆42Updated 6 years ago
• purpl3f0xsecur1ty / OSCE-prep
  Exploits made practicing for OSCE
  ☆23Updated 4 years ago
• leoloobeek / keyring
  Proper Payload Protection Prevents Poor Performance
  ☆73Updated 2 years ago
• FortyNorthSecurity / Presentations
  Any presentation we've given at FortyNorth Security
  ☆34Updated 3 years ago
• commial / labs
  Labs setup for tests & experimentations
  ☆25Updated 3 years ago
• frizb / BloodHoundCustomQueries
  List of Bloodhound Python Custom Queries which I have found to be handy on engagements
  ☆17Updated 5 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆53Updated 6 years ago
• deadjakk / Reg1c1de
  Registry permission scanner written in C# for finding potential privesc avenues within registry
  ☆85Updated 4 years ago
• sourcefrenchy / certexfil
  Exfiltration based on custom X509 certificates
  ☆26Updated last year
• ThunderGunExpress / Thunder_Woosus
  ☆39Updated 6 years ago
• bananabr / procscan
  Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.
  ☆11Updated 2 years ago
• hausec / COMMethodSearcher
  Script that searches through all COM objects for any methods containing a key word of your choosing.
  ☆73Updated 5 years ago
• dmaasland / mcfridafee
  ☆52Updated 5 years ago
• thesp0nge / shellerate
  A shellcode generator with encryption, encoding and polymorphism facilities built-in
  ☆32Updated 2 years ago
• rmdavy / WordAmsiBypass
  ☆38Updated 5 years ago
• aahmad097 / ZoomPersistence
  Zoom Persistence Aggressor and Handler
  ☆55Updated 4 years ago
• dmaasland / mcafee-config-decrypt
  ☆60Updated 5 years ago
• dtrizna / DotNetInject
  Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.
  ☆37Updated 5 years ago
• synacktiv / CacheData_decrypt
  A simple Toolkit to BF and decrypt Windows EntraId CacheData
  ☆17Updated 10 months ago
• obscuritylabs / operator-up
  Helpful operator notes and techniques in actionable form
  ☆17Updated last year
• Retrospected / kerbmon
  Continuous kerberoast monitor
  ☆45Updated last year
• singe / nthasher
  A fast wordlist to nthash converter
  ☆21Updated 3 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• k3idii / CobaltStrike-Tools
  Tools for playing w/ CobaltStrike config - extractin, detection, processing, etc...
  ☆29Updated 2 years ago
• checkymander / Forerunner
  Automation Engine using the Covenant API and lua scripting
  ☆24Updated 2 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• byt3bl33d3r / Utinni
  An async Python client library for Empire's RESTful API
  ☆25Updated last year
• njahrckstr / Windows_Kernel_Sploit_List
  ☆36Updated 6 years ago
• xenoscr / Useful-BloodHound-Queries
  A collection of Neo4j/BloodHound queries to collect interesting information.
  ☆46Updated 3 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆74Updated 5 years ago