Alternatives and similar repositories for Extension-Kit

Users that are interested in Extension-Kit are comparing it to the libraries listed below

• EricEsquivel / Inline-EA
  Cobalt Strike BOF for evasive .NET assembly execution
  ☆264Updated 4 months ago
• 0xEr3bus / RdpStrike
  Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
  ☆244Updated last year
• mertdas / SharpIncrease
  A Tool that aims to evade av with binary padding
  ☆154Updated last year
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆143Updated this week
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆224Updated last year
• decoder-it / ADCSCoercePotato
  ☆228Updated last year
• tijme / cmstplua-uac-bypass
  Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.
  ☆190Updated 2 years ago
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆223Updated last year
• Ghost53574 / havoc_profile_generator
  Havoc C2 profile generator
  ☆92Updated 3 weeks ago
• Ridter / atexec-pro
  Fileless atexec, no more need for port 445
  ☆390Updated last year
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆314Updated last year
• VoldeSec / PatchlessInlineExecute-Assembly
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆248Updated 2 years ago
• YOLOP0wn / POSTDump
  ☆336Updated 6 months ago
• praetorian-inc / goffloader
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆229Updated 5 months ago
• mertdas / RedPersist
  ☆220Updated last year
• mertdas / SharpTerminator
  Terminate AV/EDR Processes using kernel driver
  ☆347Updated 2 years ago
• Octoberfest7 / DropSpawn_BOF
  CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking
  ☆271Updated 2 years ago
• dobin / SuperMega
  Stealthily inject shellcode into an executable
  ☆236Updated last month
• Cobalt-Strike / bof-vs
  A Beacon Object File (BOF) template for Visual Studio
  ☆230Updated last month
• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.
  ☆265Updated 3 months ago
• kleiton0x00 / RemoteShellcodeExec
  Execute shellcode from a remote-hosted bin file using Winhttp.
  ☆235Updated 2 years ago
• ScriptIdiot / BOF-patchit
  An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…
  ☆136Updated 2 years ago
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆403Updated last year
• F4l13n5n0w / sn0wldr
  This project is an AES loader for c2 shellcode
  ☆30Updated last year
• WKL-Sec / Malleable-CS-Profiles
  A list of python tools to help create an OPSEC-safe Cobalt Strike profile.
  ☆466Updated 2 months ago
• wh0amitz / BypassCredGuard
  Credential Guard Bypass Via Patching Wdigest Memory
  ☆329Updated 2 years ago
• NtDallas / MemLoader
  Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible
  ☆233Updated last month
• ProcessusT / Venoma
  Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution
  ☆186Updated 2 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆181Updated 8 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆150Updated 10 months ago