Alternatives and similar repositories for XRulez

Users that are interested in XRulez are comparing it to the libraries listed below

• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆185Updated 5 years ago
• danielbohannon / Out-FINcodedCommand
  POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…
  ☆104Updated 7 years ago
• sensepost / liniaal
  Liniaal - A communication extension to Ruler
  ☆97Updated 6 years ago
• JavelinNetworks / IR-Tools
  IR-Tools - PowerShell tools for IR
  ☆130Updated 7 years ago
• sixdub / DomainTrustExplorer
  Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.
  ☆121Updated 4 years ago
• HarmJ0y / Misc-PowerShell
  Misc. PowerShell scripts
  ☆117Updated 8 years ago
• cobbr / ObfuscatedEmpire
  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
  ☆227Updated 7 years ago
• mdsecactivebreach / PowerDNS
  PowerDNS: Powershell DNS Delivery
  ☆212Updated 6 years ago
• glinares / Hephaestus
  Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing
  ☆95Updated 8 years ago
• chango77747 / AdEnumerator
  Active Directory enumeration from non-domain system.
  ☆118Updated 8 years ago
• vletoux / NTLMInjector
  In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
  ☆168Updated 8 years ago
• Raikia / SMBCrunch
  3 tools that work together to simplify reconaissance of Windows File Shares
  ☆167Updated 7 years ago
• johnnyDEP / OWA-Toolkit
  Powershell module to assist in attacking Exchange/Outlook Web Access
  ☆181Updated 8 years ago
• Cybereason / Invoke-WMILM
  ☆229Updated 7 years ago
• huntresslabs / evading-autoruns
  Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)
  ☆104Updated 4 years ago
• vysecurity / genHTA
  Generates anti-sandbox analysis HTA files without payloads
  ☆119Updated 8 years ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆296Updated 4 years ago
• Arno0x / DNSDelivery
  DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
  ☆147Updated 5 years ago
• glinares / OfficeMalware
  ☆114Updated 8 years ago
• silentbreaksec / ThrowbackLP
  Listening Post for Throwback Implant
  ☆110Updated 9 years ago
• shellster / DCSYNCMonitor
  Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
  ☆140Updated 7 years ago
• matthastings / DSCompromised
  ☆97Updated 9 years ago
• SadProcessor / EmpireDog
  A collection of PowerShell Modules for BloodHound/Empire Orchestration
  ☆106Updated 7 years ago
• Cn33liz / VBSMeter
  VBS Reversed TCP Meterpreter Stager
  ☆88Updated 8 years ago
• HarmJ0y / ImpDump
  This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.…
  ☆71Updated 8 years ago
• skelsec / PyKerberoast
  Implementing Kerberoast attack fully in python
  ☆72Updated 6 years ago
• veramine / Detections
  ☆108Updated 8 years ago
• FSecureLABS / wePWNise
  WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…
  ☆353Updated 6 years ago
• enigma0x3 / Powershell-Payload-Excel-Delivery
  Uses Invoke-Shellcode to execute a payload and persist on the system.
  ☆115Updated 8 years ago
• secabstraction / WmiSploit
  ☆164Updated 9 years ago