Alternatives and similar repositories for XRulez:

Users that are interested in XRulez are comparing it to the libraries listed below

• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆183Updated 5 years ago
• danielbohannon / Out-FINcodedCommand
  POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…
  ☆104Updated 7 years ago
• sensepost / liniaal
  Liniaal - A communication extension to Ruler
  ☆97Updated 6 years ago
• vletoux / NTLMInjector
  In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
  ☆167Updated 7 years ago
• huntresslabs / evading-autoruns
  Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)
  ☆103Updated 4 years ago
• HarmJ0y / Misc-PowerShell
  Misc. PowerShell scripts
  ☆117Updated 8 years ago
• secabstraction / WmiSploit
  ☆164Updated 9 years ago
• cobbr / ObfuscatedEmpire
  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
  ☆228Updated 7 years ago
• sixdub / DomainTrustExplorer
  Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.
  ☆121Updated 4 years ago
• vysecurity / genHTA
  Generates anti-sandbox analysis HTA files without payloads
  ☆119Updated 8 years ago
• Kevin-Robertson / Conveigh
  Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
  ☆97Updated 8 years ago
• silentbreaksec / ThrowbackLP
  Listening Post for Throwback Implant
  ☆110Updated 9 years ago
• mdsecactivebreach / PowerDNS
  PowerDNS: Powershell DNS Delivery
  ☆212Updated 6 years ago
• JavelinNetworks / IR-Tools
  IR-Tools - PowerShell tools for IR
  ☆130Updated 7 years ago
• glinares / Hephaestus
  Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
  ☆95Updated 8 years ago
• Cybereason / Invoke-WMILM
  ☆229Updated 6 years ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆295Updated 4 years ago
• ramen0x3f / AggressorScripts
  ☆272Updated 2 years ago
• Arno0x / DNSDelivery
  DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
  ☆147Updated 5 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆124Updated 6 years ago
• johnnyDEP / OWA-Toolkit
  Powershell module to assist in attacking Exchange/Outlook Web Access
  ☆181Updated 8 years ago
• SadProcessor / EmpireDog
  A collection of PowerShell Modules for BloodHound/Empire Orchestration
  ☆106Updated 7 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆168Updated 4 years ago
• skelsec / pypykatz_agent_dn
  Pypykatz agent implemented in .NET
  ☆86Updated 6 years ago
• shellster / DCSYNCMonitor
  Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
  ☆139Updated 7 years ago
• vysecurity / CACTUSTORCH
  CACTUSTORCH: Payload Generation for Adversary Simulations
  ☆76Updated 6 years ago
• veramine / Detections
  ☆108Updated 8 years ago
• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆321Updated 7 years ago
• enigma0x3 / Powershell-Payload-Excel-Delivery
  Uses Invoke-Shellcode to execute a payload and persist on the system.
  ☆113Updated 8 years ago
• darkquasar / WMI_Persistence
  A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
  ☆86Updated 7 years ago