Alternatives and similar repositories for PoisonHandler

Users that are interested in PoisonHandler are comparing it to the libraries listed below

• invokethreatguy / AggressorCollection
  Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors
  ☆154Updated 6 years ago
• Mr-Un1k0d3r / SPFAbuse
  SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp
  ☆141Updated 4 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆232Updated 2 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆166Updated 5 years ago
• SpiderLabs / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆113Updated 5 years ago
• bohops / GhostBuild
  GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
  ☆248Updated 4 years ago
• felamos / weirdhta
  A tool to create obfuscated HTA script.
  ☆179Updated 4 years ago
• decoder-it / powershellveryless
  Constrained Language Mode + AMSI bypass all in one
  ☆159Updated 6 years ago
• Mr-Un1k0d3r / MaliciousDLLGenerator
  DLL Generator for side loading attack
  ☆173Updated 6 years ago
• mdsecactivebreach / SharpPack
  An Insider Threat Toolkit
  ☆152Updated 6 years ago
• 3xpl01tc0d3r / Callidus
  ☆164Updated 2 years ago
• panagioto / SharpExchangePriv
  A C# implementation of PrivExchange by @_dirkjan.
  ☆156Updated 6 years ago
• vletoux / SpoolerScanner
  Check if MS-RPRN is remotely available with powershell/c#
  ☆174Updated 6 years ago
• taherio / redi
  Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
  ☆143Updated 7 years ago
• mdsecactivebreach / sitrep
  ☆127Updated 5 years ago
• fox-it / Invoke-CredentialPhisher
  ☆177Updated 6 years ago
• Und3rf10w / external_c2_framework
  Python api for usage with cobalt strike's External C2 specification
  ☆242Updated 2 years ago
• BC-SECURITY / Invoke-PrintDemon
  This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.
  ☆202Updated 4 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆147Updated 5 years ago
• obscuritylabs / HastySeries
  ObscurityLabs RedTeam C# Toolkit
  ☆123Updated 5 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆125Updated 6 years ago
• outflanknl / Recon-AD
  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  ☆333Updated 5 years ago
• xorrior / raven
  CobaltStrike External C2 for Websockets
  ☆198Updated 6 years ago
• Mr-Un1k0d3r / Windows-SignedBinary
  ☆255Updated 6 years ago
• n0pe-sled / WMI-Persistence
  ☆83Updated 8 years ago
• nopfor / ntlm_challenger
  Parse NTLM challenge messages over HTTP and SMB
  ☆151Updated 2 years ago
• outflanknl / Presentations
  Presentation material presented by Outflank team members at public events.
  ☆190Updated 8 months ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆252Updated 6 years ago
• HarmJ0y / TrustVisualizer
  Python script that takes new output from Get-DomainTrustMapping .csvs and outputs graphml. Based on DomainTrustExplorer.
  ☆97Updated last year
• elnerd / Get-NetNTLM
  Powershell module to get the NetNTLMv2 hash of the current user
  ☆96Updated 3 years ago