Alternatives and similar repositories for ef

Users that are interested in ef are comparing it to the libraries listed below

• BeetleChunks / Obligato
  This project is an implant framework designed for long term persistent access to Windows machines.
  ☆110Updated last year
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆108Updated 10 months ago
• Kudaes / rust_tips_and_tricks
  Rust For Windows Cheatsheet
  ☆120Updated 7 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆165Updated 2 months ago
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆264Updated 8 months ago
• zblurx / impersonate-rs
  Rusty Impersonate
  ☆96Updated last year
• RePRGM / Nimperiments
  Various one-off pentesting projects written in Nim. Updates happen on a whim.
  ☆153Updated 5 months ago
• Tylous / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆114Updated 2 years ago
• paranoidninja / BRC4-BOF-Artillery
  ☆107Updated 2 months ago
• ZERODETECTION / MSC_Dropper
  ☆166Updated 10 months ago
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆139Updated 10 months ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆187Updated 6 months ago
• Kudaes / Bin-Finder
  Detect EDR's exceptions by inspecting processes' loaded modules
  ☆130Updated last year
• nettitude / Tartarus-TpAllocInject
  ☆185Updated last year
• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆115Updated last year
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆120Updated last year
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆142Updated 2 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆136Updated last month
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆149Updated 8 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 10 months ago
• JumpsecLabs / WALK_WebAssembly_Lure_Krafter
  A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …
  ☆82Updated 9 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆91Updated last month
• p4p1 / havoc-privkit
  a port of privkit bof for havoc
  ☆23Updated last year
• BlackSnufkin / NyxInvoke
  NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…
  ☆212Updated 3 months ago
• rbmm / SC_DEMO
  ☆115Updated 2 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆162Updated last month
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated 2 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆160Updated 5 months ago
• Kudaes / ADPT
  DLL proxying for lazy people
  ☆159Updated 6 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆188Updated 4 months ago