Alternatives and similar repositories for LogHunter

Users that are interested in LogHunter are comparing it to the libraries listed below

• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆91Updated last year
• Thunter-HackTeam / EvilentCoerce
  ☆147Updated 4 months ago
• ASP4RUX / bypassEDR-AV
  ☆59Updated 10 months ago
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆79Updated 7 months ago
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆127Updated 8 months ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆71Updated last year
• rasta-mouse / SpawnWith
  ☆110Updated 7 months ago
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆98Updated 2 years ago
• OtterHacker / AWSRedirector
  ☆57Updated 7 months ago
• ghost-ng / slinger
  An impacket-lite cli tool that combines many useful impacket functions using a single session.
  ☆53Updated this week
• blackarrowsec / Handly
  Abuse leaked token handles.
  ☆132Updated last year
• 123ojp / GREtunnel-scanner
  This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  ☆77Updated last month
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆42Updated last year
• duhirsch / MoveEdr
  Permanently disable EDRs as local admin
  ☆105Updated 3 months ago
• Leo4j / ShellGen
  PowerShell script to generate ShellCode in various formats
  ☆43Updated last year
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS
  ☆149Updated 7 months ago
• CultCornholio / RedTeamTP
  ☆81Updated 4 months ago
• foxlox / hypobrychium
  Duplicate not owned Token from Running Process
  ☆72Updated 2 years ago
• fin3ss3g0d / NativeThreadpool
  Work, timer, and wait callback example using solely Native Windows APIs.
  ☆89Updated last year
• RWXstoned / GimmeShelter
  Situational Awareness script to identify how and where to run implants
  ☆65Updated 9 months ago
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆41Updated 8 months ago
• SecTheBit / ZoomBotC2
  ☆44Updated 3 months ago
• synacktiv / CVE-2024-43468
  ☆91Updated 8 months ago
• Leo4j / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆58Updated 9 months ago
• 0xthirteen / WMI_Proc_Dump
  Dump processes over WMI with MSFT_MTProcess
  ☆56Updated 2 weeks ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆98Updated 5 months ago
• PShlyundin / TimeSync
  Tool to obtain hash using MS-SNTP for user accounts
  ☆27Updated 8 months ago
• watchtowrlabs / CVE-2024-40711
  Pre-Auth Exploit for CVE-2024-40711
  ☆54Updated last year
• 0xthirteen / reg_snake
  Python tool to interact with WMI StdRegProv
  ☆60Updated 10 months ago
• decoder-it / KrbRelayEx-RPC
  ☆192Updated 6 months ago