Alternatives and similar repositories for Powershell-Persistance

Users that are interested in Powershell-Persistance are comparing it to the libraries listed below

• EvilBytecode / GoEvilDocs
  Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.
  ☆13Updated 6 months ago
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆23Updated 6 months ago
• C5Hackr / ARM64_AmsiPatch
  ☆20Updated 5 months ago
• ricardojoserf / SharpObfuscate
  Obfuscate payloads using IPv4, IPv6, MAC or UUID strings
  ☆21Updated last year
• EvilBytecode / Evilbytecode-Gate
  Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…
  ☆23Updated 6 months ago
• eversinc33 / RDPassSpray
  Python3 tool to perform password spraying using RDP
  ☆16Updated 2 years ago
• Tylous / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆15Updated 2 years ago
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆19Updated 2 years ago
• ricardojoserf / BOF_Files
  Repository to gather the BOF files I will be developing
  ☆10Updated last year
• S12cybersecurity / ETWEvasionToolkit
  Toolkit of Projects to attack and evade Event Trace for Windows
  ☆23Updated 2 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆22Updated 2 years ago
• eversinc33 / UnXorStringsNet
  Deobfuscation of XorStringsNet
  ☆14Updated 11 months ago
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆26Updated last year
• kozmer / silentpulse
  single-threaded event driven sleep obfuscation poc for linux
  ☆35Updated 4 months ago
• EvilBytecode / SsnRetrieval
  Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name,…
  ☆12Updated 6 months ago
• ZERODETECTION / Havoc_Demon_API_Hashing
  Rehashing APIs to prevent hash based detection
  ☆14Updated 9 months ago
• sudonoodle / Aggressor-NTFY
  Cobalt Strike notifications via NTFY.
  ☆14Updated last year
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆19Updated 2 years ago
• Offensive-Panda / .NET_PROFILER_DLL_LOADING
  .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…
  ☆44Updated last year
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆30Updated 8 months ago
• EvilBytecode / Evil-Go
  A malicous Golang Package
  ☆15Updated 6 months ago
• rbmm / Hollowed-Process
  ☆30Updated 2 months ago
• Und3rf10w / CobaltStrikeBOFs
  Beacon Object Files used for Cobalt Strike
  ☆19Updated 2 years ago
• ChoiSG / havoc2nginx
  havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…
  ☆13Updated 2 years ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆29Updated last year
• thiagopeixoto / mystique-self-injection
  An improvement and a different approach to Mockingjay Self-Injection.
  ☆35Updated last year
• octopwn / wsnet-dotnet
  ☆12Updated 9 months ago
• Offensive-Panda / WPM-MAJIC-ENTRY-POINT-INJECTION
  This exploit is utilising AddressOfEntryPoint of process which is RX and using WriteProcessMemory internal magic to change the permission…
  ☆18Updated 11 months ago
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆25Updated 7 months ago
• fern89 / runpe-x64
  RunPE adapted for x64 and written in C, does not use RWX
  ☆28Updated last year