Alternatives and similar repositories for Bin-Finder:

Users that are interested in Bin-Finder are comparing it to the libraries listed below

• rad9800 / FileRenameJunctionsEDRDisable
  ☆136Updated last month
• zblurx / impersonate-rs
  Rusty Impersonate
  ☆94Updated last year
• mansk1es / GhostFart
  ☆134Updated last year
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆114Updated last year
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆157Updated last month
• gabriellandau / EDRSandblast-GodFault
  EDRSandblast-GodFault
  ☆243Updated last year
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆61Updated 5 months ago
• ipSlav / DirtyCLR
  An App Domain Manager Injection DLL PoC on steroids
  ☆164Updated last year
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆73Updated 11 months ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆87Updated 7 months ago
• Octoberfest7 / enumhandles_BOF
  ☆121Updated 4 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• safedv / RustVEHSyscalls
  A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
  ☆132Updated 2 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆160Updated last month
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆118Updated 6 months ago
• kozmer / aad-bofs
  AzureAD beacon object files
  ☆105Updated last month
• zimnyaa / noWatch
  Implant drop-in for EDR testing
  ☆131Updated last year
• safedv / Rustic64
  64-bit, position-independent implant template for Windows in Rust.
  ☆103Updated 3 months ago
• thefLink / Hunt-Weird-Syscalls
  ETW based POC to identify direct and indirect syscalls
  ☆178Updated last year
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆84Updated 6 months ago
• 0xdea / blindsight
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆121Updated 2 weeks ago
• ZERODETECTION / MSC_Dropper
  ☆136Updated 5 months ago
• paranoidninja / Cobaltstrike-Detection
  This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared
  ☆88Updated last year
• passthehashbrowns / BOFMask
  ☆111Updated last year
• JumpsecLabs / WALK_WebAssembly_Lure_Krafter
  A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …
  ☆65Updated 4 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆122Updated last year
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆215Updated 4 months ago
• realoriginal / titanldr-ng
  A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge …
  ☆172Updated last year
• naksyn / ModuleShifting
  Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctype…
  ☆109Updated last year