Alternatives and similar repositories for native-powershell:

Users that are interested in native-powershell are comparing it to the libraries listed below

• Dump-GUY / sc2pe
  Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE
  ☆65Updated last year
• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆46Updated 10 months ago
• leftp / BackupCreds
  A C# implementation of dumping credentials from Windows Credential Manager
  ☆57Updated last year
• securedglobe / PersistantService
  A persistant Windows Service Proof of Concept, where the Service will run after Restart or Shutdown, and invoke a given software executab…
  ☆38Updated last year
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆78Updated 10 months ago
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆45Updated 8 months ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆71Updated this week
• outflanknl / macho-loader
  ☆81Updated 7 months ago
• thefLink / Hunt-Weird-ImageLoads
  Small tool to play with IOCs caused by Imageload events
  ☆42Updated last year
• zodiacon / youtubecode
  Youtube channel sample code
  ☆49Updated last week
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆47Updated 3 months ago
• ZephrFish / HelloJackHunter
  Research into WinSxS binaries and finding hijackable paths
  ☆28Updated this week
• jsecurity101 / LDAPMon
  ☆45Updated last year
• Jhangju / goLang-injectors
  This project will guide yout to awareness of injection in almost every window API and process.
  ☆25Updated 3 years ago
• CCob / ProvisionAppx
  ☆39Updated 2 years ago
• jborean93 / PSDetour-Hooks
  Auditing Hooks for https://github.com/jborean93/PSDetour
  ☆12Updated last week
• LloydLabs / process-enumeration-stealth
  ☆82Updated 7 months ago
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆48Updated 3 months ago
• whokilleddb / ETWListicle
  List the ETW provider(s) in the registration table of a process.
  ☆58Updated last year
• SygniaLabs / BackupKeyManager
  ☆12Updated 9 months ago
• OtterHacker / Hooker
  ☆104Updated 5 months ago
• Ben-Lichtman / reloader
  Reflective DLL self-loading as a library
  ☆19Updated 2 years ago
• S3cur3Th1sSh1t / SharpRDP
  Remote Desktop Protocol .NET Console Application for Authenticated Command Execution
  ☆11Updated 4 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆16Updated 9 months ago
• lilkui / runasti
  Runs programs as TrustedInstaller
  ☆49Updated 5 years ago
• tmenochet / PowerExec
  Offensive tool for fileless lateral movement on Windows networks
  ☆25Updated 11 months ago
• 0xjbb / vehspoof
  Callstack spoofing using a VEH because VEH all the things.
  ☆21Updated last month
• dirkjanm / Group3r
  Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.
  ☆9Updated 2 years ago
• zodiacon / TaskSched
  ☆28Updated 2 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated last year