Alternatives and similar repositories for fixes

Users that are interested in fixes are comparing it to the libraries listed below

• jfmaes / Backdoorplz
  adding a backdooruser using win32api
  ☆80Updated 5 years ago
• djhohnstein / KittyLitter
  Credential Dumper
  ☆79Updated 5 years ago
• RedSiege / MiddleOut
  A small .NET compression utility
  ☆57Updated 4 years ago
• fashionproof / CheckSafeBoot
  I used this to see if an EDR is running in Safe Mode
  ☆36Updated 5 years ago
• OsandaMalith / WindowsInternals
  Experiments on the Windows Internals
  ☆31Updated 6 years ago
• cedowens / Mod_Rewrite_Automation
  Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.
  ☆47Updated 4 years ago
• mobdk / Core
  Core bypass Windows Defender and execute any binary converted to shellcode
  ☆44Updated 4 years ago
• slyd0g / SharpCrashEventLog
  C# port of LogServiceCrash
  ☆46Updated 5 years ago
• RedSiege / SqlClient
  POC for .NET mssql client for accessing database data through beacon
  ☆64Updated 2 years ago
• PCsXcetra / DerbyCon-2019Files
  This is a group of tools that I was planning on releasing During Derbycon 2019 talk if it was accepted or with a blogpost if not.
  ☆43Updated 4 years ago
• w1u0u1 / smb2os
  Use smb2 protocol to detect remote computer os version, support win7/server2008-win10/server2019
  ☆59Updated 4 years ago
• rmdavy / AMSI_Ordinal_Bypass
  Bypass AMSI and Defender using Ordinal Values
  ☆41Updated 5 years ago
• curi0usJack / rubeus2ccache
  Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.
  ☆67Updated 5 years ago
• mez-0 / DecryptRDCManager
  .NET 4.0 Remote Desktop Manager Password Gatherer
  ☆81Updated 5 years ago
• passthehashbrowns / SharpBuster
  SharpBuster is a C# implementation of a directory brute forcing tool. It's designed to be used via Cobalt Strike's execute-assembly and s…
  ☆63Updated 5 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆70Updated 4 years ago
• dtrizna / DInvoke_PoC
  Hardened Proof of Concept of D/Invoke Process Injection malware
  ☆42Updated 5 years ago
• benpturner / Invoke-DCOM
  C# DCOM Execution
  ☆18Updated 6 years ago
• S3cur3Th1sSh1t / LDAP-Signing-Scanner
  A little scanner to check the LDAP Signing state
  ☆46Updated 4 years ago
• 001SPARTaN / FaceDancer
  Playing around with token manipulation in C#.
  ☆29Updated 6 years ago
• tobiohlala / PSMemory
  Automation Capable Multi Search 64 Bit Windows Memory Scanner
  ☆28Updated 4 years ago
• WingsOfDoom / ICU
  quick 'n dirty poc based on PoC windows auth prompt in c# based on https://gist.githubusercontent.com/mayuki/339952/raw/2c36b735bc51861a3…
  ☆31Updated 5 years ago
• vysecurity / AzureAppC2
  A script that can be deployed to Azure App for C2 / Proxy / Redirector
  ☆41Updated 6 years ago
• leonjza / tc2
  treafik fronted c2 examples
  ☆25Updated 5 years ago
• gquere / bloodhound_linux
  Ingest openldap data into bloodhound
  ☆81Updated 4 years ago
• offsecginger / AES-PowerShellCode
  Standalone version of my AES Powershell payload for Cobalt Strike.
  ☆111Updated 6 years ago
• mdsecactivebreach / CloneVault
  ☆71Updated 5 years ago
• hausec / MaliciousClickOnceMSBuild
  Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.
  ☆93Updated 5 years ago
• rsmudge / CVE-2020-0796-BOF
  ☆71Updated 5 years ago
• med0x2e / RT-EWS
  A Powershell module including a couple of cmdlets for EWS Enum/Exploitation.
  ☆17Updated 6 years ago