Alternatives and similar repositories for native-powershell

Users that are interested in native-powershell are comparing it to the libraries listed below

• ahkeur / VEH2
  A Patchless AMSI Bypass Technique using VEH²
  ☆30Updated 6 months ago
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆50Updated last year
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆62Updated last year
• ldematte / HostedPumpkin
  Submission, compilation and execution of C# code snippets, using an unmanaged CLR Host
  ☆53Updated 10 years ago
• rasta-mouse / PacketAlchemy
  Playing with packets in C#
  ☆15Updated last year
• leftp / BackupCreds
  A C# implementation of dumping credentials from Windows Credential Manager
  ☆60Updated 2 years ago
• BlackOfWorld / NtCreateUserProcess
  A small NtCreateUserProcess PoC that spawns a Command prompt.
  ☆99Updated 3 years ago
• Ben-Lichtman / reloader
  Reflective DLL self-loading as a library
  ☆21Updated 8 months ago
• Dump-GUY / sc2pe
  Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE
  ☆66Updated 2 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆16Updated last year
• LloydLabs / process-enumeration-stealth
  ☆83Updated last year
• outflanknl / macho-loader
  ☆102Updated last year
• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆50Updated last year
• ricardojoserf / NativeNtdllRemap
  Remap ntdll.dll using only NTAPI functions with a suspended process
  ☆27Updated 9 months ago
• MaorSabag / Paruns-Fart
  Just another ntdll unhooking using Parun's Fart technique
  ☆76Updated 2 years ago
• klezVirus / ThreadPoolExecChain
  A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack
  ☆93Updated 3 weeks ago
• ricardojoserf / p-invoke.net
  P/Invoke definitions from the most-of-the-time offline offline pinvoke.net. Website: https://ricardojoserf.gitbook.io/pinvoke
  ☆23Updated 9 months ago
• OtterHacker / Hooker
  ☆106Updated last year
• Ne0nd0g / go-coff
  Load and execute a common object file format (COFF) in the current process
  ☆32Updated last year
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆80Updated 6 months ago
• synacktiv / keebcap
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆53Updated 2 years ago
• whokilleddb / ETWListicle
  List the ETW provider(s) in the registration table of a process.
  ☆80Updated 2 years ago
• zimnyaa / insomnia
  a stage1 DLL loader with sleep obfuscation
  ☆36Updated 3 years ago
• lilkui / runasti
  Runs programs as TrustedInstaller
  ☆49Updated 6 years ago
• CCob / ProvisionAppx
  ☆39Updated 3 years ago
• usdAG / SharpLink
  Create file system symbolic links from low privileged user accounts within PowerShell
  ☆94Updated 3 years ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆103Updated 2 years ago
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆75Updated last year
• TheKevinWang / UACHooker
  Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.
  ☆22Updated 4 years ago
• eversinc33 / Godmode
  Tool for playing with Windows Access Token manipulation.
  ☆82Updated 3 years ago