Alternatives and similar repositories for Koh:

Users that are interested in Koh are comparing it to the libraries listed below

• NUL0x4C / TerraLdr
  A Payload Loader Designed With Advanced Evasion Features
  ☆510Updated 2 years ago
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆909Updated 9 months ago
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆744Updated last year
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆353Updated 4 years ago
• dosxuz / DefenderStop
  Stop Defender Service using C# via Token Impersonation
  ☆170Updated 3 years ago
• ZeroMemoryEx / Amsi-Killer
  Lifetime AMSI bypass
  ☆620Updated last year
• cube0x0 / KrbRelay
  Framework for Kerberos relaying
  ☆902Updated 2 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆420Updated 2 years ago
• post-cyberlabs / Offensive_tools
  ☆407Updated last year
• GoSecure / pywsus
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
  ☆303Updated 2 years ago
• FuzzySecurity / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆755Updated last year
• p0dalirius / windows-coerced-authentication-methods
  A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) wit…
  ☆516Updated 2 months ago
• h4wkst3r / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆532Updated 2 years ago
• sinfulz / JustEvadeBro
  JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.
  ☆307Updated 7 months ago
• med0x2e / NTLMRelay2Self
  An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav).
  ☆401Updated last year
• Dec0ne / ShadowSpray
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆458Updated 2 years ago
• zblurx / certsync
  Dump NTDS with golden certificates and UnPAC the hash
  ☆632Updated last year
• 0xthirteen / SharpStay
  .NET project for installing Persistence
  ☆468Updated 9 months ago
• zblurx / dploot
  DPAPI looting remotely and locally in Python
  ☆450Updated this week
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆479Updated 10 months ago
• mgeeky / Stracciatella
  OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…
  ☆518Updated 2 years ago
• S3cur3Th1sSh1t / SharpImpersonation
  A User Impersonation tool - via Token or Shellcode injection
  ☆413Updated 2 years ago
• klezVirus / vortex
  VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit
  ☆431Updated last year
• boh / RedCsharp
  Collection of C# projects. Useful for pentesting and redteaming.
  ☆305Updated last year
• CCob / lsarelayx
  NTLM relaying for Windows made easy
  ☆559Updated last year
• MythicAgents / Apollo
  A .NET Framework 4.0 Windows Agent
  ☆468Updated last week
• CCob / Volumiser
  ☆377Updated 6 months ago
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆387Updated last year
• Octoberfest7 / XLL_Phishing
  XLL Phishing Tradecraft
  ☆413Updated 2 years ago
• outflanknl / PrintNightmare
  ☆335Updated 3 years ago