Alternatives and similar repositories for DNS_Tunneling:

Users that are interested in DNS_Tunneling are comparing it to the libraries listed below

• deepinstinct / NoFilter
  ☆296Updated 3 months ago
• deepinstinct / Lsass-Shtinkering
  ☆376Updated 2 years ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆335Updated last year
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆255Updated 2 years ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆317Updated 11 months ago
• Dec0ne / ShadowSpray
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆456Updated 2 years ago
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆383Updated 10 months ago
• improsec / SharpEventPersist
  Persistence by writing/reading shellcode from Event Log
  ☆370Updated 2 years ago
• trustedsec / orpheus
  Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types
  ☆378Updated last year
• paranoidninja / Brute-Ratel-C4-Community-Kit
  This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)
  ☆264Updated 5 months ago
• Cobalt-Strike / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆197Updated 3 weeks ago
• subat0mik / whoamsi
  An effort to track security vendors' use of Microsoft's Antimalware Scan Interface
  ☆238Updated 2 years ago
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆252Updated last year
• MzHmO / PowershellKerberos
  Some scripts to abuse kerberos using Powershell
  ☆322Updated last year
• MythicAgents / Athena
  ☆186Updated last week
• synacktiv / ntdissector
  ☆131Updated 5 months ago
• cepxeo / dll4shell
  Shellcode launcher for AV bypass
  ☆218Updated last year
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆317Updated 6 months ago
• mandiant / msi-search
  ☆269Updated last year
• nickvourd / COM-Hunter
  COM Hijacking VOODOO
  ☆262Updated this week
• mertdas / PrivKit
  PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.
  ☆384Updated 7 months ago
• calebstewart / bypass-clm
  PowerShell Constrained Language Mode Bypass
  ☆242Updated 3 years ago
• api0cradle / CVE-2023-23397-POC-Powershell
  ☆341Updated last year
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆269Updated 2 months ago
• Mayyhem / Maestro
  Abusing Intune for Lateral Movement over C2
  ☆322Updated 2 weeks ago
• HavocFramework / Modules
  Modules used by the Havoc Framework
  ☆212Updated 7 months ago
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆180Updated last year
• layer8secure / SilentHound
  Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
  ☆485Updated 2 years ago
• zblurx / certsync
  Dump NTDS with golden certificates and UnPAC the hash
  ☆629Updated 10 months ago
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆189Updated 2 years ago