Alternatives and similar repositories for TeamsImplant:

Users that are interested in TeamsImplant are comparing it to the libraries listed below

• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆209Updated 3 years ago
• xforcered / WFH
  ☆189Updated 2 years ago
• xforcered / CredBandit
  Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…
  ☆240Updated 3 years ago
• mattifestation / AntimalwareBlight
  Execute PowerShell code at the antimalware-light protection level.
  ☆140Updated 2 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago
• xpn / sccmwtf
  ☆148Updated last month
• GhostPack / RestrictedAdmin
  Remotely enables Restricted Admin Mode
  ☆208Updated 3 years ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆320Updated last year
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆190Updated 2 years ago
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆233Updated last year
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆139Updated 11 months ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆173Updated 2 years ago
• trustedsec / SeeYouCM-Thief
  ☆186Updated last year
• Flangvik / SharpExfiltrate
  Modular C# framework to exfiltrate loot over secure and trusted channels.
  ☆123Updated 3 years ago
• CCob / SylantStrike
  Simple EDR implementation to demonstrate bypass
  ☆171Updated 4 years ago
• xforcered / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆188Updated 3 years ago
• paranoidninja / O365-Doppelganger
  A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user
  ☆258Updated 3 years ago
• mdsecactivebreach / Farmer
  ☆365Updated 3 years ago
• nheiniger / SnaffPoint
  A tool for pointesters to find candies in SharePoint
  ☆251Updated 2 years ago
• RiccardoAncarani / LiquidSnake
  LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
  ☆329Updated 3 years ago
• jfmaes / AmsiHooker
  Hookers are cooler than patches.
  ☆170Updated 3 years ago
• njcve / inflate.py
  Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.
  ☆119Updated 2 years ago
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆385Updated 11 months ago
• SecurityRiskAdvisors / msspray
  Password attacks and MFA validation against various endpoints in Azure and Office 365
  ☆152Updated 2 years ago
• last-byte / RIPPL
  RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows
  ☆7Updated 2 years ago
• Dramelac / GoldenCopy
  Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.
  ☆89Updated 10 months ago
• HackingLZ / ExtractedDefender
  ☆214Updated 2 years ago
• airbus-cert / Invoke-Bof
  Load any Beacon Object File using Powershell!
  ☆249Updated 3 years ago
• o1mate / AppLocker-Bypass
  Bypassing AppLocker with C#
  ☆138Updated 3 years ago
• fozavci / WeaponisingCSharp-Fundamentals
  Weaponising C# - Fundamentals Training Content
  ☆70Updated 3 years ago