Alternatives and similar repositories for SSH-Stealer

Users that are interested in SSH-Stealer are comparing it to the libraries listed below

• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆106Updated 2 months ago
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆97Updated last week
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆140Updated 5 months ago
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆225Updated last year
• Zerx0r / dvenom
  🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.
  ☆158Updated last year
• Dump-GUY / EXE-or-DLL-or-ShellCode
  Just a simple silly PoC demonstrating executable "exe" file that can be used like exe, dll or shellcode...
  ☆158Updated 11 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆150Updated 11 months ago
• v1k1ngfr / fuegoshell
  Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445
  ☆54Updated last year
• SaadAhla / dark-kill
  A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Cal…
  ☆217Updated 2 months ago
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆153Updated 3 weeks ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆133Updated last month
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆113Updated 2 months ago
• MatheuZSecurity / RingReaper
  Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.
  ☆295Updated this week
• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆122Updated 10 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆79Updated last week
• absholi7ly / CVE-2025-0282-Ivanti-exploit
  CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overfl…
  ☆48Updated 7 months ago
• Wh04m1001 / CVE-2025-48799
  ☆236Updated last month
• Network-Sec / CVE-2025-21420-PoC
  We found a way to DLL sideload with cleanmgr.exe
  ☆92Updated 6 months ago
• duck-sec / CVE-2023-28252-Compiled-exe
  A modification to fortra's CVE-2023-28252 exploit, compiled to exe
  ☆54Updated last year
• blackarrowsec / Handly
  Abuse leaked token handles.
  ☆132Updated last year
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• trickster0 / NamelessC2
  Nameless C2 - A C2 with all its components written in Rust
  ☆273Updated 11 months ago
• Darkrain2009 / RedExt
  Chrome browser extension-based Command & Control
  ☆166Updated last month
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆127Updated 6 months ago
• 0xEr3bus / RdpStrike
  Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
  ☆246Updated last year
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆195Updated 9 months ago
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆224Updated last year
• flostyen / windows-persistence
  Windows Persistence IT-Security
  ☆103Updated 5 months ago
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆99Updated last year