Alternatives and similar repositories for TeamsImplant:

Users that are interested in TeamsImplant are comparing it to the libraries listed below

• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆206Updated 3 years ago
• xforcered / WFH
  ☆187Updated 2 years ago
• xforcered / CredBandit
  Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…
  ☆238Updated 3 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆256Updated 2 years ago
• mattifestation / AntimalwareBlight
  Execute PowerShell code at the antimalware-light protection level.
  ☆138Updated 2 years ago
• HackingLZ / ExtractedDefender
  ☆214Updated 2 years ago
• o1mate / AppLocker-Bypass
  Bypassing AppLocker with C#
  ☆138Updated 3 years ago
• CCob / SylantStrike
  Simple EDR implementation to demonstrate bypass
  ☆166Updated 4 years ago
• RedSiege / PersistAssist
  Fully modular persistence framework
  ☆250Updated last year
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆321Updated 11 months ago
• mdsecactivebreach / Farmer
  ☆363Updated 3 years ago
• xpn / sccmwtf
  ☆145Updated last week
• t3hbb / DefenderCheck
  Identifies the bytes that Microsoft Defender flags on.
  ☆82Updated 2 years ago
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆231Updated last year
• airbus-cert / Invoke-Bof
  Load any Beacon Object File using Powershell!
  ☆245Updated 3 years ago
• jfmaes / AmsiHooker
  Hookers are cooler than patches.
  ☆168Updated 3 years ago
• nheiniger / SnaffPoint
  A tool for pointesters to find candies in SharePoint
  ☆242Updated 2 years ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆166Updated 2 years ago
• paranoidninja / O365-Doppelganger
  A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user
  ☆252Updated 2 years ago
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆139Updated 10 months ago
• Flangvik / SharpExfiltrate
  Modular C# framework to exfiltrate loot over secure and trusted channels.
  ☆122Updated 3 years ago
• last-byte / RIPPL
  RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows
  ☆7Updated 2 years ago
• njcve / inflate.py
  Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.
  ☆119Updated 2 years ago
• deepinstinct / Lsass-Shtinkering
  ☆375Updated 2 years ago
• nettitude / MalSCCM
  ☆244Updated last year
• fozavci / WeaponisingCSharp-Fundamentals
  Weaponising C# - Fundamentals Training Content
  ☆70Updated 3 years ago
• deepinstinct / NoFilter
  ☆296Updated 3 months ago
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆189Updated 2 years ago
• nettitude / Aladdin
  ☆219Updated last year
• GhostPack / RestrictedAdmin
  Remotely enables Restricted Admin Mode
  ☆206Updated 3 years ago