Alternatives and similar repositories for blackbear:

Users that are interested in blackbear are comparing it to the libraries listed below

• decoder-it / BadBackupOperator
  ☆36Updated 6 years ago
• kmkz / Sources
  Random source codes
  ☆25Updated 4 years ago
• rvrsh3ll / FlaskRedirectorProtector
  Protect your servers with a secret header
  ☆28Updated 4 years ago
• stufus / shellcode-implant-stub
  Source code in Win32 ASM and C for a shellcode execution wrapper designed to mitigate the risk of shellcode execution on a host other tha…
  ☆19Updated 8 years ago
• upils / redirect-lib
  Library of traffic redirectors
  ☆26Updated 4 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆53Updated 5 years ago
• ThunderGunExpress / ThunderMSI
  ☆28Updated 7 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆22Updated 4 years ago
• DimopoulosElias / SimpleMimikatzObfuscator
  A set of commands to bypass Defender (and some other AVs)
  ☆20Updated 5 years ago
• airman604 / schtask_now
  ☆17Updated 5 years ago
• rmdavy / WordAmsiBypass
  ☆37Updated 5 years ago
• tevora-threat / rt_redirectors
  Ansible role to configure redirectors for red team C2
  ☆28Updated 6 years ago
• decoder-it / diaghub_exploit
  Simplified version of Forshaw's Diaghub Collector Exploit
  ☆31Updated 5 years ago
• py7hagoras / OfficeMacro64
  This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…
  ☆19Updated 4 years ago
• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 6 years ago
• ThunderGunExpress / Thunder_Woosus
  ☆38Updated 6 years ago
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆25Updated 4 years ago
• vysecurity / AzureAppC2
  A script that can be deployed to Azure App for C2 / Proxy / Redirector
  ☆35Updated 5 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆30Updated 4 years ago
• checkymander / CoreSploit
  Initial Commit of Coresploit
  ☆55Updated 3 years ago
• CompassSecurity / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆17Updated 4 years ago
• byt3bl33d3r / herpaderping
  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…
  ☆19Updated 4 years ago
• 0xC0D1F1ED / cpp_vs_payload_template
  Visual Studio (C++) Solution Template for Payloads
  ☆18Updated 5 years ago
• slyd0g / SharpRoast-Parser
  Bash one-liner that will parse harmj0y's SharpRoast or Rebeus kerberoast into hashcat crack-able format.
  ☆32Updated 5 years ago
• leonjza / tc2
  treafik fronted c2 examples
  ☆26Updated 4 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• johnnyDEP / cobaltstrike
  cobalt strike stuff I have gathered from around github
  ☆31Updated 7 years ago
• rmdavy / AmsiPEBWalkVBAx64
  ☆14Updated 4 years ago
• CCob / Jboss-Wilfly-Hashes-to-Hashcat
  Converts JBoss/Wildfly management users properties file to hashcat format compatible with mode 20
  ☆12Updated 4 years ago
• maaaaz / mimicertz
  A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates
  ☆25Updated 6 years ago