Alternatives and similar repositories for MSHTA-VBS-download-and-execute

Users that are interested in MSHTA-VBS-download-and-execute are comparing it to the libraries listed below

• 0xyg3n / DarkFender
  Disable Windows Defender Silently (ByPass TamperProtection & ByPass Trustednstaller)
  ☆36Updated 5 years ago
• plackyhacker / PowerGhost
  A custom run space to bypass AMSI and Constrained Language mode in PowerShell.
  ☆20Updated 2 years ago
• 1M50RRY / runpe-native-loader
  Loader and RunPE file executer
  ☆18Updated 6 years ago
• guillaC / xToBatConverter
  Generate a ms batch file and inject a files inside of it. When the batch is executed, the files are extracted and executed.
  ☆22Updated 6 years ago
• rvrsh3ll / PELoader
  Load PE via XML Attribute
  ☆32Updated 5 years ago
• 11philip22 / code-Injection
  Collection of shellcode injection and execution techniques
  ☆18Updated 2 months ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆17Updated 7 years ago
• NYAN-x-CAT / CodeDomExample
  C# Codedom example / builder
  ☆24Updated 5 years ago
• guibacellar / BisquillaRansomware
  The evolution of NxRansomware
  ☆11Updated 6 years ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆40Updated 4 years ago
• NYAN-x-CAT / Csharp-Loader
  Download a .NET payload and run it on memory
  ☆71Updated 6 years ago
• 0x25bit / darkRat_HVNC
  DarkRats Standalone HVNC
  ☆24Updated 3 years ago
• b4rtik / SharpLoadImage
  Hide .Net assembly into png images
  ☆36Updated 6 years ago
• TheKevinWang / UACHooker
  Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.
  ☆21Updated 4 years ago
• malcomvetter / WMIProcessWatcher
  An example pattern in C# for using WMI to monitor process creation and termination events.
  ☆53Updated 7 years ago
• Mantraufo / Kanoninjector
  Runpe + DInvoke + Syscall
  ☆16Updated 4 years ago
• 0x00-0x00 / CVE-2019-1064
  CVE-2019-1064 Local Privilege Escalation Vulnerability
  ☆11Updated 6 years ago
• Kara-4search / BypassAMSI_CSharp
  Bypass AMSI
  ☆14Updated 4 years ago
• DamonMohammadbagher / Videos-BypassingAVsByCSharp
  Video files for eBook: "Bypassing AVs by C#.NET Programming"
  ☆40Updated 2 years ago
• rkzofficial / Horizon
  Remote Administration Tool, Server Written in C# and Client Written in C++
  ☆14Updated 2 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆56Updated 2 years ago
• p3nt4 / RunDLL.Net
  Execute .Net assemblies using Rundll32.exe
  ☆113Updated 4 years ago
• notkohlrexo / WindowsDefender-Payload-Downloader
  Disabling Windows Defender & downloading payload
  ☆21Updated 5 years ago
• arsium / BypassGetModuleBaseAddressAndGetExportAddress
  A proof of concept of real custom GetProcAddress and GetModuleBaseAddress
  ☆20Updated 3 years ago
• SoufiyanAk / HiddenRDP-OPENER
  This script make any windows compatible with RDP connection
  ☆21Updated 3 months ago
• mobdk / HideCode
  Hide code from dnSpy and other C# spying tools
  ☆42Updated 5 years ago
• melardev / XeytanWin32-RAT
  WORK IN PROGRESS. RAT written in C++ using Win32 API
  ☆20Updated 6 years ago
• iDigitalFlame / InYourMems
  Windows Antivirus Evasion and Memory Injection
  ☆12Updated 3 years ago
• NYAN-x-CAT / AutoIt-PowerShell-Loader
  Download and loader .NET payload
  ☆37Updated 6 years ago
• 0r13lc0ch4v1 / HideFromAMSI
  Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI
  ☆31Updated 5 years ago