Alternatives and similar repositories for RingReaper

Users that are interested in RingReaper are comparing it to the libraries listed below

• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆268Updated 4 months ago
• 0xflux / Wyrm
  The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.
  ☆446Updated this week
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆216Updated 3 months ago
• 0xdea / blindsight
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆245Updated 3 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆236Updated 5 months ago
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆150Updated 4 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆270Updated last year
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆220Updated 9 months ago
• trickster0 / NamelessC2
  Nameless C2 - A C2 with all its components written in Rust
  ☆282Updated last year
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆235Updated 11 months ago
• DarkSpaceSecurity / RunAs-Stealer
  RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
  ☆203Updated 11 months ago
• badsectorlabs / ludus_adaptix_c2
  An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts
  ☆177Updated 8 months ago
• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆121Updated 5 months ago
• BlackSnufkin / GhostDriver
  yet another AV killer tool using BYOVD
  ☆300Updated 2 years ago
• Print3M / ByteCaster
  Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supporte…
  ☆208Updated 4 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆169Updated last year
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆153Updated 6 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆191Updated 9 months ago
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆432Updated 7 months ago
• Wh04m1001 / CVE-2024-20656
  ☆137Updated 2 years ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆205Updated last year
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆146Updated last year
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 11 months ago
• loosehose / SilentButDeadly
  SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…
  ☆432Updated 3 months ago
• django-88 / NomadScanner
  ☆163Updated 2 months ago
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆149Updated 7 months ago
• rad9800 / byor
  ☆163Updated 7 months ago
• boku7 / StringReaper
  Reaping treasures from strings in remote processes memory
  ☆285Updated last year
• rvrsh3ll / Bolthole
  Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.
  ☆264Updated 9 months ago