Alternatives and similar repositories for Conti-Leaked-Playbook-TTPs

Users that are interested in Conti-Leaked-Playbook-TTPs are comparing it to the libraries listed below

• NVISOsecurity / cobalt-strike-notifier

  View on GitHub
  ☆13Jul 30, 2021Updated 4 years ago
• frkngksl / UnlinkDLL

  View on GitHub
  DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable
  ☆59Dec 15, 2023Updated 2 years ago
• idiom / stackstack

  View on GitHub
  ☆32Apr 24, 2022Updated 3 years ago
• ZPetricusic / defender_signature_parser

  View on GitHub
  Short Python script for parsing Defender VDM signature files.
  ☆10Sep 22, 2024Updated last year
• HackingLZ / TomcatBackdoorPoC

  View on GitHub
  Tomcat backdoor based on CS blog
  ☆29Jun 30, 2023Updated 2 years ago
• sp0ckus / DefCon33

  View on GitHub
  ☆16Aug 25, 2025Updated 5 months ago
• omerbenamram / winstructs

  View on GitHub
  Parsers for common structures across windows formats.
  ☆12Aug 23, 2023Updated 2 years ago
• bufferbandit / silent_cleanup_uac_bypass

  View on GitHub
  Silent Cleanup UAC Bypass POC
  ☆11Dec 15, 2019Updated 6 years ago
• forensicmatt / libtsk-rs

  View on GitHub
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆12Jan 10, 2023Updated 3 years ago
• mandiant / vbScript_deobfuscator

  View on GitHub
  Help deobfuscate VBScript
  ☆18Jul 1, 2022Updated 3 years ago
• elastic / sans-dfir-2022

  View on GitHub
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Feb 6, 2025Updated last year
• EspressoCake / ReadRemoteProcessCommandline_BOF

  View on GitHub
  ☆29May 10, 2024Updated last year
• AbdulRhmanAlfaifi / SDSParser-rs

  View on GitHub
  NTFS Security Descriptor Stream ($Secure:$SDS) parser
  ☆14Jan 9, 2023Updated 3 years ago
• HuskyHacks / CobaltNotion

  View on GitHub
  A spin-off research project. Cobalt Strike x Notion collab 2022
  ☆53Apr 8, 2022Updated 3 years ago
• p0dalirius / CrackedNTDStoXLSX

  View on GitHub
  A python tool to generate an Excel file linking the list of cracked accounts and their LDAP attributes.
  ☆12Jan 31, 2025Updated last year
• ssp4rk / threatintel

  View on GitHub
  ☆11Mar 12, 2021Updated 4 years ago
• jnqpblc / SharpReg

  View on GitHub
  SharpReg is a simple code set to interact with the Remote Registry service api and is compatible with Cobalt Strike.
  ☆28Apr 12, 2020Updated 5 years ago
• nccgroup / UninstalledAppCanary

  View on GitHub
  A Canary which fires when uninstalled
  ☆34Mar 16, 2021Updated 4 years ago
• zodi4cx / OpenSesame

  View on GitHub
  A bootkit to bypass Windows login (WIP)
  ☆10Oct 25, 2023Updated 2 years ago
• forensicmatt / RustyReg

  View on GitHub
  Registry to JSON. This Project is for learning purposes and is not maintained.
  ☆12Dec 28, 2021Updated 4 years ago
• Iansus / SilentLsassDump

  View on GitHub
  VisualStudio port of https://github.com/guervild/BOFs/tree/dev/SilentLsassDump
  ☆24Jul 6, 2023Updated 2 years ago
• MISP / misp-grafana

  View on GitHub
  A real-time Grafana dashboard using MISP ZeroMQ message queue and InfluxDB
  ☆18Mar 15, 2024Updated last year
• k3idii / ION

  View on GitHub
  Indicators of Normality
  ☆11Jul 22, 2022Updated 3 years ago
• redr0nin / Serenity

  View on GitHub
  C# DInvoke Shellcode Runner
  ☆31Feb 10, 2025Updated last year
• reecdeep / HiveV5_file_decryptor

  View on GitHub
  Hive v5 file decryption algorithm
  ☆34Nov 28, 2022Updated 3 years ago
• amohanta / Detection_Engineering_Tools

  View on GitHub
  Detection Engineering Tools
  ☆20Feb 9, 2026Updated last week
• forensicmatt / RustyLnk

  View on GitHub
  LNK to JSON
  ☆14Mar 7, 2019Updated 6 years ago
• RWXstoned / GimmeShelter

  View on GitHub
  Situational Awareness script to identify how and where to run implants
  ☆67Dec 6, 2024Updated last year
• oopsmishap / ida-forge

  View on GitHub
  ☆12Feb 2, 2025Updated last year
• alexfrancow / offensive-vlang

  View on GitHub
  POCs to test Vlang in cybersecurity aspects.
  ☆37Dec 29, 2022Updated 3 years ago
• dadevel / bloodhoundcli

  View on GitHub
  Utilities for Pentesting with BloodHound
  ☆22Dec 10, 2025Updated 2 months ago
• Spnl48 / PSInjector

  View on GitHub
  Code injection is a technique where a process can insert a part of or all of its code from its own running process into another target pr…
  ☆14Jun 15, 2023Updated 2 years ago
• petikvx / OfficeMalwares

  View on GitHub
  Sources Codes of many Office Malwares
  ☆17Sep 4, 2022Updated 3 years ago
• branoodle / Wizard

  View on GitHub
  ☆10Nov 3, 2021Updated 4 years ago
• cipher387 / corporative_registry_worldwide_catalog

  View on GitHub
  Corporative registry worldwide catalog. 63 countries
  ☆16Jun 24, 2022Updated 3 years ago
• sclow / covenant_mgmt

  View on GitHub
  ☆13Jul 15, 2021Updated 4 years ago
• EspressoCake / BeaconDownloadSync

  View on GitHub
  ☆94May 14, 2022Updated 3 years ago
• med0x2e / vba2clr

  View on GitHub
  Running .NET from VBA
  ☆149Feb 11, 2023Updated 3 years ago
• Octoberfest7 / BeatRev

  View on GitHub
  POC for frustrating/defeating Malware Analysts
  ☆158Jun 12, 2022Updated 3 years ago