Alternatives and similar repositories for MSHTA-VBS-download-and-execute

Users that are interested in MSHTA-VBS-download-and-execute are comparing it to the libraries listed below

• b4rtik / SharpLoadImage
  Hide .Net assembly into png images
  ☆36Updated 6 years ago
• 0xyg3n / DarkFender
  Disable Windows Defender Silently (ByPass TamperProtection & ByPass Trustednstaller)
  ☆37Updated 5 years ago
• NYAN-x-CAT / Csharp-Loader
  Download a .NET payload and run it on memory
  ☆70Updated 6 years ago
• plackyhacker / PowerGhost
  A custom run space to bypass AMSI and Constrained Language mode in PowerShell.
  ☆20Updated 2 years ago
• rvrsh3ll / PELoader
  Load PE via XML Attribute
  ☆31Updated 5 years ago
• p3nt4 / RunDLL.Net
  Execute .Net assemblies using Rundll32.exe
  ☆113Updated 4 years ago
• 1M50RRY / runpe-native-loader
  Loader and RunPE file executer
  ☆18Updated 6 years ago
• mobdk / HideCode
  Hide code from dnSpy and other C# spying tools
  ☆42Updated 4 years ago
• NYAN-x-CAT / CodeDomExample
  C# Codedom example / builder
  ☆24Updated 5 years ago
• guillaC / xToBatConverter
  Generate a ms batch file and inject a files inside of it. When the batch is executed, the files are extracted and executed.
  ☆21Updated 5 years ago
• Kara-4search / BypassAMSI_CSharp
  Bypass AMSI
  ☆14Updated 4 years ago
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆66Updated 3 years ago
• arsium / ShellCodeLoaderCSharp
  A small shellcode loader library written in C#
  ☆47Updated 3 years ago
• badBounty / directInjectorPOC
  Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.
  ☆83Updated 5 years ago
• guibacellar / BisquillaRansomware
  The evolution of NxRansomware
  ☆11Updated 6 years ago
• 0x00-0x00 / CVE-2019-1064
  CVE-2019-1064 Local Privilege Escalation Vulnerability
  ☆11Updated 6 years ago
• darsigovrustam / KillAV
  The project uses popular anti-virus protection bypass techniques
  ☆12Updated 6 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆15Updated 6 years ago
• slyd0g / LNKMod
  C# project to create or modify existing LNKs
  ☆55Updated 2 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆56Updated 2 years ago
• SoufiyanAk / HiddenRDP-OPENER
  This script make any windows compatible with RDP connection
  ☆20Updated last month
• TheKevinWang / UACHooker
  Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.
  ☆21Updated 4 years ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆40Updated 4 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• TheWover / EasyNet
  Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…
  ☆93Updated 6 years ago
• AzAgarampur / byeintegrity4-uac
  Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers
  ☆18Updated 4 years ago
• 0r13lc0ch4v1 / HideFromAMSI
  Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI
  ☆31Updated 5 years ago
• NYAN-x-CAT / AutoIt-PowerShell-Loader
  Download and loader .NET payload
  ☆37Updated 5 years ago
• Mantraufo / Kanoninjector
  Runpe + DInvoke + Syscall
  ☆16Updated 4 years ago
• notkohlrexo / WindowsDefender-Payload-Downloader
  Disabling Windows Defender & downloading payload
  ☆21Updated 5 years ago