Alternatives and similar repositories for DoUCMe:

Users that are interested in DoUCMe are comparing it to the libraries listed below

• Barbarisch / forkatz
  credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege
  ☆124Updated 3 years ago
• jfmaes / SharpLNKGen-UI
  UI for creating LNKs
  ☆103Updated 3 years ago
• rvrsh3ll / NoMSBuild
  MSBuild without MSbuild.exe
  ☆132Updated 4 years ago
• EncodeGroup / AggressiveGadgetToJScript
  A Cobalt Strike Aggressor script to generate GadgetToJScript payloads
  ☆102Updated 4 years ago
• S3cur3Th1sSh1t / Get-System-Techniques
  ☆94Updated 2 years ago
• Adepts-Of-0xCC / MiniDumpWriteDumpPoC
  MiniDumpWriteDump behavior modification hook
  ☆50Updated 4 years ago
• guervild / BOFs
  Cobalt Strike Beacon Object Files
  ☆161Updated 2 years ago
• rxwx / cs-rdll-ipc-example
  Example code for using named pipe output with beacon ReflectiveDLLs
  ☆115Updated 4 years ago
• FatRodzianko / Get-RBCD-Threaded
  Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments
  ☆120Updated 3 years ago
• pwn1sher / CS-BOFs
  Collection of CobaltStrike beacon object files
  ☆103Updated 3 years ago
• VirtualAlllocEx / Taskschedule-Persistence-Download-Cradles
  Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged
  ☆86Updated 2 years ago
• netbiosX / AMSI-Provider
  A fake AMSI Provider which can be used for persistence.
  ☆148Updated 3 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆144Updated 3 years ago
• FalconForceTeam / SysWhispers2BOF
  Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs
  ☆123Updated 2 years ago
• RiccardoAncarani / BOFs
  Collection of Beacon Object Files (BOFs) for shells and lols
  ☆117Updated 3 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆143Updated 3 years ago
• S3cur3Th1sSh1t / Invoke-Sharpcradle
  Load C# Code straight to memory
  ☆54Updated 4 years ago
• 0xVIC / myAPPLockerBypassSummary
  Simple APPLocker bypass summary
  ☆41Updated 6 years ago
• whydee86 / SnD_AMSI
  Start new PowerShell without etw and amsi in pure nim
  ☆157Updated 3 years ago
• SolomonSklash / RubeusToCcache
  A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket
  ☆55Updated 4 years ago
• S3cur3Th1sSh1t / RDPThiefInject
  RDPThief donut shellcode inject into mstsc
  ☆84Updated 3 years ago
• Crypt0s / DelegationBOF
  ☆141Updated 2 years ago
• Flangvik / SharpAppLocker
  C# port of the Get-AppLockerPolicy PS cmdlet
  ☆98Updated 2 years ago
• Flangvik / SharpExfiltrate
  Modular C# framework to exfiltrate loot over secure and trusted channels.
  ☆125Updated 3 years ago
• mitchmoser / LACheck
  ☆85Updated 3 years ago
• xforcered / Detect-Hooks
  Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
  ☆100Updated 3 years ago
• rasta-mouse / GadgetToJScript
  A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …
  ☆84Updated 4 years ago
• EspressoCake / BeaconDownloadSync
  ☆93Updated 2 years ago
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆121Updated 3 years ago
• apokryptein / secinject
  Section Mapping Process Injection (secinject): Cobalt Strike BOF
  ☆94Updated 3 years ago