Alternatives and similar repositories for exec2shell

Users that are interested in exec2shell are comparing it to the libraries listed below

• wabzsy / gonut
  Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.
  ☆59Updated 2 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 2 years ago
• secur30nly / go-self-delete
  Go implementation of the self-deletion of an running executable from disk
  ☆113Updated 2 years ago
• D00Movenok / goMalleable
  🔎🪲 Malleable C2 profiles parser and assembler written in golang
  ☆66Updated last year
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆53Updated 2 years ago
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆83Updated 2 years ago
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆138Updated 2 years ago
• Rvn0xsy / AsmShellcodeLoader
  汇编语言编写Shellcode加载器源代码 https://payloads.online/archivers/2022-02-16/1/
  ☆78Updated 2 years ago
• ChoiSG / SharpSilentChrome
  SharpSilentChrome is a C# project that "silently" installs browser extensions on Google Chrome or MS Edge by updating the browsers' Prefe…
  ☆73Updated 3 weeks ago
• timwhitez / Doge-Assembly
  Golang evasion tool, execute-assembly .Net file
  ☆97Updated 3 years ago
• Ne0nd0g / go-clr
  A PoC package for hosting the CLR and executing .NET from Go
  ☆76Updated last year
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆68Updated 2 years ago
• Nero22k / cve-2023-36802
  Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver
  ☆112Updated last year
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆55Updated last year
• timwhitez / ReturnGate
  ReturnGate, just like HellsGate.
  ☆67Updated 2 years ago
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆58Updated last year
• timwhitez / Doge-RecycledGate
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆32Updated 3 years ago
• timwhitez / Doge-CLRLoad
  load assembly executable file in memory
  ☆41Updated last year
• aleenzz / ChromeExtensionInstall
  Silently Install Chrome Extension For Persistence
  ☆91Updated last year
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆82Updated 3 years ago
• timwhitez / Doge-MemX
  Golang implementation of Reflective load PE from memory
  ☆62Updated 3 years ago
• akkuman / gSigFlip
  A SigFlip implement in golang
  ☆47Updated 3 years ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆141Updated 3 years ago
• aus / gopherheaven
  Go implementation of the Heaven's Gate technique
  ☆98Updated 4 years ago
• XMCyber / VmwarePasswordDecryptor
  ☆81Updated 3 years ago
• grines / goc2
  MacOS C2 Framework
  ☆84Updated 3 years ago
• vincd / savoir
  Savoir is a tool to perform tasks during internal security assessment
  ☆19Updated 3 years ago
• Cobalt-Strike / callback_examples
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆34Updated 4 months ago
• The-Z-Labs / cli4bofs
  A swiss army knife tool for running, injecting and organizing your BOFs collection
  ☆60Updated 3 weeks ago
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago