Alternatives and similar repositories for CVE-2023-36745:

Users that are interested in CVE-2023-36745 are comparing it to the libraries listed below

• Zerx0r / dvenom
  🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.
  ☆156Updated last year
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆254Updated 8 months ago
• wh0amitz / S4UTomato
  Escalate Service Account To LocalSystem via Kerberos
  ☆393Updated last year
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆140Updated 3 months ago
• Workingdaturah / Payload-Generator
  An aggressor script that can help automate payload building in Cobalt Strike
  ☆115Updated last year
• testanull / MS-SharePoint-July-Patch-RCE-PoC
  ☆154Updated 9 months ago
• mertdas / SharpIncrease
  A Tool that aims to evade av with binary padding
  ☆148Updated 9 months ago
• mertdas / RedPersist
  ☆215Updated last year
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆204Updated last year
• Aur3ns / Morpheus
  Morpheus is a memory dumper that extracts lsass.exe in RAM and exfiltrates it via forged NTP packets. It uses RC4 encryption and Reed-Sol…
  ☆89Updated 2 weeks ago
• mertdas / SharpTerminator
  Terminate AV/EDR Processes using kernel driver
  ☆341Updated last year
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆220Updated 11 months ago
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆131Updated 8 months ago
• mertdas / PrivKit
  PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.
  ☆403Updated 10 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆148Updated 7 months ago
• Wh04m1001 / CVE-2024-20656
  ☆137Updated last year
• Ridter / atexec-pro
  Fileless atexec, no more need for port 445
  ☆366Updated last year
• wh0amitz / BypassCredGuard
  Credential Guard Bypass Via Patching Wdigest Memory
  ☆323Updated 2 years ago
• 0xEr3bus / RdpStrike
  Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
  ☆238Updated 10 months ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆151Updated 11 months ago
• RalfHacker / Kerbeus-BOF
  BOF for Kerberos abuse (an implementation of some important features of the Rubeus).
  ☆458Updated 3 weeks ago
• BlackSnufkin / GhostDriver
  yet another AV killer tool using BYOVD
  ☆270Updated last year
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆205Updated last year
• tylerdotrar / SigmaPotato
  SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection s…
  ☆326Updated 11 months ago
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆206Updated this week
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆309Updated last year
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆136Updated last year
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆297Updated 5 months ago
• WKL-Sec / Malleable-CS-Profiles
  A list of python tools to help create an OPSEC-safe Cobalt Strike profile.
  ☆417Updated last year
• brosck / Awesome-AV-EDR-XDR-Bypass
  Awesome AV/EDR/XDR Bypass Tips
  ☆267Updated last year