Alternatives and similar repositories for Lifetime-Amsi-EtwPatch

Users that are interested in Lifetime-Amsi-EtwPatch are comparing it to the libraries listed below

• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆125Updated 4 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆149Updated 6 months ago
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS
  ☆150Updated 9 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated 2 years ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆91Updated last year
• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆118Updated last year
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆165Updated 3 months ago
• m8sec / Dispatch
  Evasive Payload Delivery Server & C2 Redirector
  ☆110Updated last week
• decoder-it / KrbRelayEx-RPC
  ☆195Updated 7 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆209Updated last year
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆209Updated last year
• netero1010 / SCCMVNC
  A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…
  ☆105Updated last year
• decoder-it / ChgPass
  ☆135Updated 9 months ago
• paranoidninja / BRC4-BOF-Artillery
  ☆136Updated last week
• rtecCyberSec / SpeechRuntimeMove
  Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking
  ☆131Updated 4 months ago
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆120Updated 2 weeks ago
• temp43487580 / EntraPassTheCert
  tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
  ☆124Updated 2 months ago
• OtterHacker / AWSRedirector
  ☆57Updated 8 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆175Updated 8 months ago
• rasta-mouse / SpawnWith
  ☆109Updated 8 months ago
• Octoberfest7 / lnk_generator
  Small project to facilitate creation of .lnk payloads
  ☆74Updated 2 years ago
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆98Updated 2 years ago
• p4p1 / havoc-privkit
  a port of privkit bof for havoc
  ☆24Updated last year
• t3hbb / PanGP_Extractor
  Tool to extract username and password of current user from PanGPA in plaintext
  ☆88Updated 10 months ago
• t94j0 / adexplorersnapshot-rs
  ☆83Updated last year
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆101Updated 7 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆139Updated last year
• whokilleddb / hoontr
  A hoontr must hoont
  ☆101Updated 3 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆177Updated 5 months ago
• nromsdahl / squarephish2
  OAuth Device Code Phishing Toolkit
  ☆92Updated 2 months ago