Alternatives and similar repositories for CelestialSpark

Users that are interested in CelestialSpark are comparing it to the libraries listed below

• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆63Updated last year
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆91Updated last year
• dmcxblue / WSL-Payloads
  A small How-To on creating your own weaponized WSL file
  ☆83Updated 2 weeks ago
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆30Updated last year
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆95Updated 3 months ago
• rasta-mouse / SpawnWith
  ☆107Updated 5 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆121Updated last month
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆148Updated last year
• fin3ss3g0d / NativeThreadpool
  Work, timer, and wait callback example using solely Native Windows APIs.
  ☆89Updated last year
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆134Updated this week
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆97Updated last year
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆117Updated 8 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆196Updated 6 months ago
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆78Updated 5 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆95Updated last month
• rad9800 / FileRenameJunctionsEDRDisable
  ☆155Updated 7 months ago
• cybersectroll / TrollDump
  ☆82Updated last year
• OtterHacker / AWSRedirector
  ☆57Updated 5 months ago
• BeetleChunks / Obligato
  This project is an implant framework designed for long term persistent access to Windows machines.
  ☆110Updated last year
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆149Updated last week
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆81Updated 2 years ago
• xpn / CloudInject
  ☆112Updated 8 months ago
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆63Updated last year
• whokilleddb / sinister-vsix
  Blog/Journal on how to backdoor VSCode extensions
  ☆63Updated 2 weeks ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆131Updated 2 weeks ago
• CultCornholio / RedTeamTP
  ☆71Updated 2 months ago
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆79Updated 4 months ago
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆53Updated last week