Alternatives and similar repositories for SharpToken

Users that are interested in SharpToken are comparing it to the libraries listed below

• BeichenDream / PrintNotifyPotato
  PrintNotifyPotato
  ☆524Updated 2 years ago
• crisprss / RasmanPotato
  Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do
  ☆372Updated 2 years ago
• zcgonvh / DCOMPotato
  Some Service DCOM Object and SeImpersonatePrivilege abuse.
  ☆363Updated 2 years ago
• FDlucifer / Proxy-Attackchain
  Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)
  ☆540Updated last year
• Prepouce / CoercedPotato
  A Windows potato to privesc
  ☆373Updated 10 months ago
• CrossC2 / CrossC2Kit
  CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some inte…
  ☆221Updated last year
• CodeXTF2 / ScreenshotBOF
  An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memor…
  ☆435Updated 2 months ago
• chainreactors / malice-network
  Next Generation C2 Framework
  ☆334Updated this week
• knight0x07 / ImpulsiveDLLHijack
  C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can…
  ☆529Updated 3 years ago
• XiaoliChan / RedCaddy
  C2 redirector base on caddy
  ☆204Updated last year
• hackvens / CoercedPotato
  ☆229Updated 8 months ago
• colind0pe / AV-Bypass-Learning
  免杀学习笔记
  ☆223Updated 2 years ago
• Wh04m1001 / CVE-2023-21752
  ☆317Updated 2 years ago
• kyxiaxiang / Beacon_Source
  not a reverse-engineered version of the Cobalt Strike Beacon
  ☆371Updated last year
• XiaoliChan / wmiexec-RegOut
  Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-softw…
  ☆279Updated 2 years ago
• wh0amitz / PetitPotato
  Local privilege escalation via PetitPotam (Abusing impersonate privileges).
  ☆441Updated 2 years ago
• timwhitez / Doge-Gabh
  GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisp…
  ☆321Updated 10 months ago
• f1zm0 / hades
  Go shellcode loader that combines multiple evasion techniques
  ☆372Updated 2 years ago
• Z3ratu1 / geacon_plus
  CobaltStrike beacon written in golang
  ☆435Updated last year
• threatexpress / random_c2_profile
  Cobalt Strike random C2 Profile generator
  ☆660Updated 2 years ago
• wgpsec / CreateHiddenAccount
  A tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具
  ☆475Updated 3 years ago
• CBLabresearch / Clematis
  PE to shellcode
  ☆222Updated 6 months ago
• XiaoliChan / wmiexec-Pro
  New generation of wmiexec.py
  ☆1,108Updated last month
• mverschu / CVE-2025-33073
  PoC Exploit for the NTLM reflection SMB flaw.
  ☆437Updated last month
• wh0amitz / BypassCredGuard
  Credential Guard Bypass Via Patching Wdigest Memory
  ☆329Updated 2 years ago
• WKL-Sec / Malleable-CS-Profiles
  A list of python tools to help create an OPSEC-safe Cobalt Strike profile.
  ☆460Updated last month
• YOLOP0wn / POSTDump
  ☆334Updated 5 months ago
• m3rcer / Chisel-Strike
  A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
  ☆457Updated last year
• horizon3ai / vcenter_saml_login
  A tool to extract the IdP cert from vCenter backups and log in as Administrator
  ☆510Updated last year
• netero1010 / ScheduleRunner
  A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation
  ☆345Updated 5 months ago