Alternatives and similar repositories for Bin-Finder:

Users that are interested in Bin-Finder are comparing it to the libraries listed below

• zblurx / impersonate-rs
  Rusty Impersonate
  ☆95Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆150Updated 3 months ago
• mansk1es / GhostFart
  ☆133Updated last year
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆115Updated last year
• safedv / RustVEHSyscalls
  A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
  ☆136Updated 4 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆92Updated 8 months ago
• flostyen / windows-persistence
  Windows Persistence IT-Security
  ☆90Updated 2 weeks ago
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆118Updated 8 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆171Updated 3 months ago
• FalconForceTeam / bof-winrm-client
  ☆103Updated 2 months ago
• ipSlav / DirtyCLR
  An App Domain Manager Injection DLL PoC on steroids
  ☆167Updated last year
• zimnyaa / noWatch
  Implant drop-in for EDR testing
  ☆135Updated last year
• MaorSabag / SideLoadingDLL
  Do some DLL SideLoading magic
  ☆79Updated last year
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• x42en / sysplant
  Your syscall factory
  ☆121Updated 2 weeks ago
• Octoberfest7 / enumhandles_BOF
  ☆125Updated 6 months ago
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆150Updated last week
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆75Updated last year
• bohops / DynamicDotNet
  A collection of various and sundry code snippets that leverage .NET dynamic tradecraft
  ☆141Updated 10 months ago
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆257Updated 6 months ago
• Octoberfest7 / BeatRev
  POC for frustrating/defeating Malware Analysts
  ☆154Updated 2 years ago
• mertdas / SharpLateral
  Lateral Movement
  ☆123Updated last year
• kozmer / aad-bofs
  AzureAD beacon object files
  ☆117Updated 3 months ago
• xalicex / LOLDrivers_finder
  ☆78Updated last year
• rbmm / SC_DEMO
  ☆110Updated last week
• Kudaes / Dumpy
  Reuse open handles to dynamically dump LSASS.
  ☆236Updated 11 months ago
• gabriellandau / EDRSandblast-GodFault
  EDRSandblast-GodFault
  ☆257Updated last year
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆78Updated last year
• thefLink / Hunt-Weird-Syscalls
  ETW based POC to identify direct and indirect syscalls
  ☆181Updated last year
• naksyn / ModuleShifting
  Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctype…
  ☆113Updated last year