Alternatives and similar repositories for Powershell-Persistance

Users that are interested in Powershell-Persistance are comparing it to the libraries listed below

• EvilBytecode / GoEvilDocs
  Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.
  ☆12Updated 4 months ago
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆23Updated 4 months ago
• C5Hackr / ARM64_AmsiPatch
  ☆19Updated 3 months ago
• EvilBytecode / Evilbytecode-Gate
  Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…
  ☆23Updated 4 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆20Updated 2 years ago
• RedSiege / Delta-Encoder
  ☆16Updated last year
• eversinc33 / RDPassSpray
  Python3 tool to perform password spraying using RDP
  ☆17Updated 2 years ago
• EvilBytecode / ThunderKitty-Ransomware
  Ransomware written in go, encrypt - decrypt.
  ☆26Updated 4 months ago
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆18Updated last year
• ricardojoserf / SharpObfuscate
  Obfuscate payloads using IPv4, IPv6, MAC or UUID strings
  ☆20Updated last year
• EvilBytecode / SsnRetrieval
  Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name,…
  ☆12Updated 4 months ago
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆18Updated 2 years ago
• HulkOperator / AuthStager
  ☆57Updated 10 months ago
• kozmer / silentpulse
  single-threaded event driven sleep obfuscation poc for linux
  ☆35Updated 2 months ago
• S12cybersecurity / ETWEvasionToolkit
  Toolkit of Projects to attack and evade Event Trace for Windows
  ☆15Updated 3 months ago
• bot984397 / eepy
  ☆35Updated 4 months ago
• ricardojoserf / BOF_Files
  Repository to gather the BOF files I will be developing
  ☆10Updated 10 months ago
• patrickt2017 / VEHNetLoader
  Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies
  ☆38Updated last month
• Tylous / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆15Updated 2 years ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆29Updated last year
• ZERODETECTION / Havoc_Demon_API_Hashing
  Rehashing APIs to prevent hash based detection
  ☆12Updated 7 months ago
• brosck / APIHookingDetector
  「⚙️」Detect which native Windows API's (NtAPI) are being hooked
  ☆39Updated 8 months ago
• TraiLeR2 / CVE-2023-36168
  An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component
  ☆11Updated 2 years ago
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆25Updated 5 months ago
• Offensive-Panda / .NET_PROFILER_DLL_LOADING
  .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…
  ☆43Updated last year
• sudonoodle / Aggressor-NTFY
  Cobalt Strike notifications via NTFY.
  ☆14Updated 11 months ago
• Und3rf10w / CobaltStrikeBOFs
  Beacon Object Files used for Cobalt Strike
  ☆19Updated 2 years ago
• xelemental / Mal-LNK-Generator
  ☆34Updated 4 months ago
• kleiton0x00 / RtlHijack
  Alternative Read and Write primitives using Rtl* functions the unintended way.
  ☆55Updated this week