Alternatives and similar repositories for dylight:

Users that are interested in dylight are comparing it to the libraries listed below

• EspressoCake / ADIDNS_Parser
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Updated 2 months ago
• NoahKirchner / speedloader
  Rust template/library for implementing your own COFF loader
  ☆50Updated 2 months ago
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆36Updated last week
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆41Updated 5 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆38Updated 9 months ago
• Mr-Un1k0d3r / BOFCode
  Bunch of BOF files
  ☆30Updated 4 months ago
• EspressoCake / BOF_Development_Docker
  A VSCode devcontainer for development of COFF files with batteries included.
  ☆48Updated last year
• OffenseTeacher / Steganim
  ☆48Updated last year
• dmcxblue / NtCreateUserProcessBOF
  An Aggressor Script that utilizes NtCreateUserProcess to run binaries
  ☆26Updated 2 months ago
• rasta-mouse / KerbApp
  ☆28Updated 10 months ago
• xforcered / VectoredExceptionHandling
  ☆32Updated 8 months ago
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆25Updated last month
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated 8 months ago
• nickvourd / Rocabella
  Sniffing files generator
  ☆54Updated last month
• xpn / adfstoolkit
  ☆34Updated 3 months ago
• KingOfTheNOPs / Get-NetNTLM
  Internal Monologue BOF
  ☆16Updated 3 months ago
• dmcxblue / AzureRedirector
  A C# project that builds a Web Application which redirects all HTTPS
  ☆24Updated 2 months ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆39Updated last year
• FuzzySecurity / SAFACon-Vienna
  ☆23Updated 11 months ago
• Hackcraft-Labs / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆33Updated last year
• kapellos / VladimiRED
  ☆18Updated 4 months ago
• 0xRedpoll / SignalKeyBOF
  BOF to decrypt Signal Desktop chat logs
  ☆65Updated 2 months ago
• CompassSecurity / TokenPhisher
  ☆26Updated 2 months ago
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆36Updated 5 months ago
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆70Updated 11 months ago
• sagiol / Terms-of-What
  Terms of Use Conditional Access M365 Evilginx Phishlet
  ☆32Updated last week
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated 11 months ago
• kapellos / LNKSmuggler
  A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.
  ☆13Updated 3 months ago
• delivr-to / MailCollector
  A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM
  ☆20Updated 10 months ago