Alternatives and similar repositories for RunAs-Stealer

Users that are interested in RunAs-Stealer are comparing it to the libraries listed below

• tehstoni / LexiCrypt
  Shellcode encryptor using a substitution cipher with a randomly generated key.
  ☆137Updated 7 months ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• CICADA8-Research / Penetration
  Our Tips&Tricks
  ☆125Updated 6 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆153Updated 3 weeks ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆192Updated last month
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆174Updated 3 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆205Updated last year
• NtDallas / Svartalfheim
  Stage 0
  ☆163Updated 8 months ago
• BlackSnufkin / Invoke-DumpMDEConfig
  PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges requir…
  ☆150Updated last year
• Darkrain2009 / RedExt
  Chrome browser extension-based Command & Control
  ☆166Updated last month
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆174Updated 5 months ago
• jeanlucdupont / EXEfromCER
  PoC that downloads an executable from a public SSL certificate
  ☆125Updated last month
• rvrsh3ll / Bolthole
  Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.
  ☆221Updated 3 months ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆185Updated last year
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆168Updated 4 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆94Updated last week
• The-Viper-One / Invoke-RDPThief
  Inject RDPThief into memory with PowerShell.
  ☆65Updated 7 months ago
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆207Updated 8 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆140Updated last year
• rad9800 / byor
  ☆155Updated 2 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆211Updated 4 months ago
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆258Updated 4 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆123Updated last month
• Thunter-HackTeam / EvilentCoerce
  ☆145Updated 3 months ago
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆138Updated 11 months ago
• MatheuZSecurity / RingReaper
  Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.
  ☆285Updated 3 weeks ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆110Updated 2 months ago
• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆116Updated 8 months ago
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆106Updated 2 months ago