Alternatives and similar repositories for LolDriverScan

Users that are interested in LolDriverScan are comparing it to the libraries listed below

• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆185Updated last year
• floesen / EventLogCrasher
  ☆188Updated last year
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆207Updated last year
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆174Updated 3 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆140Updated last year
• amjcyber / pwnlook
  An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…
  ☆167Updated 10 months ago
• deepinstinct / NoFilter
  ☆300Updated 9 months ago
• maliciousgroup / C2_Automation
  C2 Automation using Linode
  ☆83Updated 2 years ago
• akamai / DDSpoof
  DDSpoof is a tool that enables DHCP DNS Dynamic Update attacks against Microsoft DHCP servers in AD environments.
  ☆130Updated last year
• trustedsec / specula
  ☆206Updated 2 months ago
• ricardojoserf / WhoamiAlternatives
  Different methods to get current username without using whoami
  ☆178Updated last year
• lolc2 / lolc2.github.io
  lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection
  ☆239Updated 2 months ago
• mandiant / msi-search
  ☆287Updated 2 years ago
• amjcyber / EDRNoiseMaker
  Detect WFP filters blocking EDR communications
  ☆93Updated last year
• arosenmund / defcon33_silence_kill_edr
  ☆104Updated last week
• sensepost / mydumbedr
  ☆120Updated last year
• p0dalirius / FindUnusualSessions
  A tool to remotely detect unusual sessions opened on windows machines using RPC
  ☆116Updated 2 months ago
• ad0nis / ntlm_relay_gat
  ☆160Updated last year
• MzHmO / WhoIsWho
  Amazing whoami alternatives
  ☆140Updated last year
• BlackSnufkin / GhostDriver
  yet another AV killer tool using BYOVD
  ☆293Updated last year
• RedSiege / AutoFunkt
  Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles
  ☆199Updated last year
• yehia-mamdouh / Shell3er
  PowerShell Reverse Shell
  ☆78Updated 2 years ago
• ph4nt0mbyt3 / Darkside
  C# AV/EDR Killer using less-known driver (BYOVD)
  ☆179Updated last year
• ACE-Responder / RogueSliver
  A suite of tools to disrupt campaigns using the Sliver C2 framework.
  ☆279Updated 2 years ago
• Laokoon-SecurITy / Cortex-XDR-Config-Extractor
  Cortex XDR Config Extractor
  ☆133Updated 2 years ago
• hackerhouse-opensource / Artillery
  CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…
  ☆176Updated last year
• surajpkhetani / AutoSmuggle
  Utility to craft HTML or SVG smuggled files for Red Team engagements
  ☆244Updated last year
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆213Updated 7 months ago