Alternatives and similar repositories for OffensivePipeline

Users that are interested in OffensivePipeline are comparing it to the libraries listed below

• Flangvik / NetLoader
  Loads any C# binary in mem, patching AMSI + ETW.
  ☆840Updated 4 years ago
• bats3c / ADCSPwn
  A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…
  ☆865Updated 2 years ago
• Flangvik / BetterSafetyKatz
  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…
  ☆876Updated 4 years ago
• TheWover / CertStealer
  A .NET tool for exporting and importing certificates without touching disk.
  ☆499Updated 4 years ago
• juliourena / SharpNoPSExec
  Get file less command execution for lateral movement.
  ☆630Updated 3 years ago
• b4rtik / SharpKatz
  Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands
  ☆1,010Updated 4 years ago
• cube0x0 / KrbRelay
  Framework for Kerberos relaying
  ☆933Updated 3 years ago
• FuzzySecurity / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆824Updated 2 years ago
• G0ldenGunSec / SharpSecDump
  .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py
  ☆613Updated 2 years ago
• GhostPack / ForgeCert
  "Golden" certificates
  ☆705Updated last year
• eladshamir / Whisker
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆926Updated last year
• mgeeky / Stracciatella
  OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…
  ☆538Updated 3 years ago
• CCob / SharpBlock
  A method of bypassing EDR's active projection DLL's by preventing entry point exection
  ☆1,163Updated 4 years ago
• Flangvik / AMSI.fail
  C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
  ☆429Updated last year
• Mr-Un1k0d3r / RedTeamCSharpScripts
  C# Script used for Red Team
  ☆724Updated 4 years ago
• CCob / lsarelayx
  NTLM relaying for Windows made easy
  ☆579Updated 2 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆432Updated 3 years ago
• knavesec / Max
  Maximizing BloodHound. Max is a good boy.
  ☆529Updated 7 months ago
• Mr-Un1k0d3r / RedTeamCCode
  Red Team C code repo
  ☆569Updated last year
• PwnDexter / SharpEDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆733Updated last month
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆746Updated 2 years ago
• MythicAgents / Apollo
  A .NET Framework 4.0 Windows Agent
  ☆521Updated this week
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆369Updated 5 years ago
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆585Updated 4 months ago
• mhaskar / DNSStager
  Hide your payload in DNS
  ☆615Updated 2 years ago
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆908Updated 4 years ago
• optiv / Go365
  An Office365 User Attack Tool
  ☆645Updated last year
• klezVirus / CheeseTools
  Self-developed tools for Lateral Movement/Code Execution
  ☆716Updated 4 years ago
• klezVirus / chameleon
  PowerShell Script Obfuscator
  ☆580Updated 2 years ago
• skahwah / SQLRecon
  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
  ☆772Updated 2 months ago