Alternatives and similar repositories for MultCheck:

Users that are interested in MultCheck are comparing it to the libraries listed below

• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆114Updated last year
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆52Updated 6 months ago
• xpn / CloudInject
  ☆107Updated 3 months ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆88Updated 8 months ago
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆73Updated last year
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆165Updated 2 months ago
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆149Updated last year
• cybersectroll / SharpPersistSD
  ☆85Updated 9 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆144Updated 9 months ago
• blackarrowsec / Handly
  Abuse leaked token handles.
  ☆131Updated last year
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆79Updated 3 months ago
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆98Updated last year
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆66Updated 6 months ago
• 0xthirteen / AssemblyHunter
  Find .net assemblies locally
  ☆104Updated 2 years ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆167Updated last year
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆78Updated 5 months ago
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆162Updated 8 months ago
• cybersectroll / TrollDump
  ☆80Updated 9 months ago
• dmcxblue / SharpBlackout
  Terminate AV/EDR leveraging BYOVD attack
  ☆80Updated last year
• SafeBreach-Labs / CortexVortex
  ☆74Updated 9 months ago
• leftp / DPAPISnoop
  A C# tool to output crackable DPAPI hashes from user MasterKeys
  ☆132Updated 5 months ago
• t94j0 / adexplorersnapshot-rs
  ☆74Updated 6 months ago
• ZephrFish / QoL-BOFs
  Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning
  ☆127Updated 2 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆83Updated 7 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆122Updated last year
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆172Updated 2 months ago
• nettitude / Tartarus-TpAllocInject
  ☆180Updated last year
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 6 months ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆104Updated 10 months ago