Alternatives and similar repositories for Invoke-WMILM:

Users that are interested in Invoke-WMILM are comparing it to the libraries listed below

• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆231Updated 2 years ago
• tyranid / DeviceGuardBypasses
  A repository of some of my Windows 10 Device Guard Bypasses
  ☆135Updated 7 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆256Updated 6 years ago
• nettitude / Invoke-PowerThIEf
  The PowerThIEf, an Internet Explorer Post Exploitation library
  ☆130Updated 3 weeks ago
• vletoux / NTLMInjector
  In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
  ☆163Updated 7 years ago
• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆319Updated 7 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆145Updated 5 years ago
• decoder-it / psportfwd
  a simple portforwarder in ps1 with embeded c# code
  ☆89Updated 6 years ago
• vysecurity / genHTA
  Generates anti-sandbox analysis HTA files without payloads
  ☆118Updated 8 years ago
• vysecurity / CACTUSTORCH
  CACTUSTORCH: Payload Generation for Adversary Simulations
  ☆75Updated 6 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆124Updated 6 years ago
• sensepost / liniaal
  Liniaal - A communication extension to Ruler
  ☆97Updated 6 years ago
• Cn33liz / CScriptShell
  CScriptShell, a Powershell Host running within cscript.exe
  ☆160Updated 7 years ago
• danielbohannon / Out-FINcodedCommand
  POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…
  ☆103Updated 7 years ago
• 0xbadjuju / WheresMyImplant
  A Bring Your Own Land Toolkit that Doubles as a WMI Provider
  ☆285Updated 6 years ago
• mdsecactivebreach / PowerDNS
  PowerDNS: Powershell DNS Delivery
  ☆211Updated 6 years ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆253Updated 6 years ago
• Arno0x / DNSDelivery
  DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
  ☆147Updated 5 years ago
• leechristensen / Random
  Assorted scripts and one off things
  ☆265Updated 7 months ago
• RhinoSecurityLabs / Aggressor-Scripts
  Aggregation of Cobalt Strike's aggressor scripts.
  ☆142Updated 6 years ago
• Cn33liz / VBSMeter
  VBS Reversed TCP Meterpreter Stager
  ☆86Updated 7 years ago
• ramen0x3f / AggressorScripts
  ☆272Updated 2 years ago
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆322Updated 5 years ago
• FSecureLABS / XRulez
  A command line tool for creating malicious outlook rules
  ☆161Updated 6 years ago
• SpiderLabs / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆106Updated 5 years ago
• ryhanson / ExternalC2
  A library for integrating communication channels with the Cobalt Strike External C2 server
  ☆283Updated 7 years ago
• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆182Updated 5 years ago
• praetorian-inc / vulcan
  a tool to make it easy and fast to test various forms of injection
  ☆172Updated 5 years ago
• DimopoulosElias / alpc-mmc-uac-bypass
  UAC Bypass with mmc via alpc
  ☆156Updated 5 years ago
• johnjohnsp1 / Shellcode-Via-HTA
  How To Execute Shellcode via HTA
  ☆137Updated 7 years ago