Alternatives and similar repositories for HookingLsassForCredentials

Users that are interested in HookingLsassForCredentials are comparing it to the libraries listed below

• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆140Updated 9 months ago
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆67Updated last year
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆66Updated last year
• Octoberfest7 / enumhandles_BOF
  ☆126Updated last year
• Teach2Breach / stargate
  Locate dlls and function addresses without PEB Walk and EAT parsing
  ☆90Updated last week
• deh00ni / NtDumpBOF
  ☆99Updated last year
• rasta-mouse / Crystal-Loaders
  A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike
  ☆171Updated 2 weeks ago
• dk0m / ZeroCrumb
  Dumping App Bound Protected Credentials & Cookies Without Privileges.
  ☆99Updated 5 months ago
• leftp / RegPersist
  a BOF implementation of various registry persistence methods
  ☆33Updated last week
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆84Updated last year
• Teach2Breach / dll2shell
  converts sRDI compatible dlls to shellcode
  ☆32Updated 9 months ago
• entropy-z / PostEx-Arsenal
  Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, lateral moviment (scm, winrm, dcom,…
  ☆68Updated this week
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆52Updated last year
• nickvourd / SugarFree
  Less sugar (entropy) for your binaries
  ☆33Updated 2 months ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆83Updated last year
• Print3M / epic
  Extensible Position Independent Code – shellcode (C/C++) development and building toolkit designed for developer experience, predictabili…
  ☆69Updated last week
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆67Updated 8 months ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆136Updated last year
• jsecu / ModTask
  ☆52Updated last month
• ofasgard / execute-assembly-pico
  A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.
  ☆91Updated 3 weeks ago
• winterknife / SILVERPICK
  Windows User-Mode Shellcode Development Framework (WUMSDF)
  ☆74Updated this week
• iilegacyyii / DataInject-BOF
  Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll
  ☆132Updated 7 months ago
• susMdT / ForsHops
  ForsHops
  ☆59Updated 7 months ago
• 0xTriboulet / InlineExecuteEx
  A BOF that's a BOF Loader
  ☆137Updated last week
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆97Updated 4 months ago
• M1ndo / WerDump
  A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass
  ☆161Updated last month
• zero2504 / Early-Cryo-Bird-Injections
  Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects
  ☆121Updated 7 months ago
• kr0tt / EarlyExceptionHandling
  Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH
  ☆129Updated 2 months ago
• zarkones / BloodfangC2
  Modern PIC implant for Windows (64 & 32 bit)
  ☆105Updated 3 months ago
• Maldev-Academy / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆53Updated 6 months ago