Alternatives and similar repositories for Extension-Kit

Users that are interested in Extension-Kit are comparing it to the libraries listed below

• 0xEr3bus / RdpStrike
  Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
  ☆241Updated last year
• mertdas / SharpIncrease
  A Tool that aims to evade av with binary padding
  ☆154Updated last year
• EricEsquivel / Inline-EA
  Cobalt Strike BOF for evasive .NET assembly execution
  ☆262Updated 3 months ago
• decoder-it / ADCSCoercePotato
  ☆229Updated last year
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆139Updated last month
• Ridter / atexec-pro
  Fileless atexec, no more need for port 445
  ☆387Updated last year
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆207Updated last year
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆222Updated last year
• praetorian-inc / goffloader
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆226Updated 4 months ago
• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.
  ☆264Updated 3 months ago
• dobin / SuperMega
  Stealthily inject shellcode into an executable
  ☆231Updated 3 weeks ago
• mertdas / RedPersist
  ☆220Updated last year
• tijme / cmstplua-uac-bypass
  Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.
  ☆186Updated 2 years ago
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆315Updated last year
• YOLOP0wn / POSTDump
  ☆334Updated 5 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆150Updated 9 months ago
• F4l13n5n0w / sn0wldr
  This project is an AES loader for c2 shellcode
  ☆30Updated last year
• VoldeSec / PatchlessInlineExecute-Assembly
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆243Updated 2 years ago
• Octoberfest7 / DropSpawn_BOF
  CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking
  ☆271Updated 2 years ago
• Meowmycks / koneko
  Robust Cobalt Strike shellcode loader with multiple advanced evasion features
  ☆165Updated 2 months ago
• mertdas / SharpTerminator
  Terminate AV/EDR Processes using kernel driver
  ☆347Updated 2 years ago
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆399Updated last year
• ScriptIdiot / BOF-patchit
  An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…
  ☆135Updated 2 years ago
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆316Updated 7 months ago
• Cobalt-Strike / bof-vs
  A Beacon Object File (BOF) template for Visual Studio
  ☆226Updated 2 weeks ago
• Ghost53574 / havoc_profile_generator
  Havoc C2 profile generator
  ☆91Updated 8 months ago
• vari-sh / RedTeamGrimoire
  🔥📜 Forbidden collection of Red Team sorcery 📜🔥
  ☆166Updated last month
• NtDallas / MemLoader
  Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible
  ☆226Updated 3 weeks ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆181Updated 7 months ago
• kleiton0x00 / RemoteShellcodeExec
  Execute shellcode from a remote-hosted bin file using Winhttp.
  ☆235Updated 2 years ago