Alternatives and similar repositories for go-donut:

Users that are interested in go-donut are comparing it to the libraries listed below

• sh4hin / GoPurple
  Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions
  ☆481Updated 3 years ago
• C-Sto / BananaPhone
  It's a go variant of Hells gate! (directly calling windows kernel functions, but from Go!)
  ☆495Updated 2 years ago
• D00MFist / Go4aRun
  Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process
  ☆229Updated 4 years ago
• antonioCoco / MalSeclogon
  A little tool to play with the Seclogon service
  ☆310Updated 2 years ago
• C-Sto / gosecretsdump
  Dump ntds.dit really fast
  ☆383Updated 3 years ago
• anthemtotheego / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆642Updated last year
• rvrsh3ll / BOF_Collection
  Various Cobalt Strike BOFs
  ☆613Updated 2 years ago
• ajpc500 / BOFs
  Collection of Beacon Object Files
  ☆572Updated 2 years ago
• CCob / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆696Updated 5 months ago
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆449Updated last year
• mgeeky / ElusiveMice
  Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind
  ☆441Updated last year
• codewhitesec / HandleKatz
  PIC lsass dumper using cloned handles
  ☆580Updated 2 years ago
• Binject / universal
  Universal Shared Library User-space Loader
  ☆223Updated 2 years ago
• bats3c / EvtMute
  Apply a filter to the events being reported by windows event logging
  ☆261Updated 3 years ago
• Ne0nd0g / merlin-agent
  Post-exploitation agent for Merlin
  ☆190Updated 4 months ago
• vyrus001 / go-mimikatz
  A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.
  ☆616Updated 2 years ago
• S3cur3Th1sSh1t / Nim-RunPE
  A Nim implementation of reflective PE-Loading from memory
  ☆274Updated 5 months ago
• capt-meelo / laZzzy
  laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.
  ☆468Updated 2 years ago
• 0xthirteen / StayKit
  Cobalt Strike kit for Persistence
  ☆472Updated 5 years ago
• forrest-orr / artifacts-kit
  Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windo…
  ☆222Updated 11 months ago
• C-Sto / goWMIExec
  Really stupid re-implementation of invoke-wmiexec
  ☆214Updated last year
• outflanknl / InlineWhispers
  Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)
  ☆310Updated 3 years ago
• FSecureLABS / incognito
  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  ☆148Updated 4 years ago
• deepinstinct / LsassSilentProcessExit
  Command line interface to dump LSASS memory to disk via SilentProcessExit
  ☆446Updated 4 years ago
• dtmsecurity / bof_helper
  Beacon Object File (BOF) Creation Helper
  ☆225Updated 2 years ago
• jfmaes / SharpZipRunner
  Executes position independent shellcode from an encrypted zip
  ☆301Updated 4 years ago
• optiv / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆297Updated last year
• neox41 / go-procinject
  Process Injection Techniques with Golang
  ☆77Updated 4 years ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆474Updated 2 years ago
• boku7 / Ninja_UUID_Runner
  Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!
  ☆441Updated last year