Alternatives and similar repositories for KillDefender_BOF:

Users that are interested in KillDefender_BOF are comparing it to the libraries listed below

• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• Hagrid29 / BOF-DCOMPotato-PrintNotify
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆42Updated 2 years ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆42Updated 2 years ago
• Hagrid29 / BOF-SprayAD
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆44Updated 2 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp
  Load shellcode via syscall
  ☆47Updated 3 years ago
• XiaoliChan / Invoke-sAMSpoofing
  CVE-2021-42287/CVE-2021-42278 exploits in powershell
  ☆37Updated 2 years ago
• Jumbo-WJB / SharpAllowedToAct-Modify
  resource-based constrained delegation RBCD
  ☆43Updated 3 years ago
• timwhitez / Doge-DumpMem
  dump lsass
  ☆37Updated 2 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆40Updated last year
• m1ddl3w4r3 / ExecRemoteNET
  Execute Remote Assembly with args passing and with AMSI and ETW patching .
  ☆32Updated 2 years ago
• JDArmy / Lsass-Shtinkering
  dump lsass tool
  ☆39Updated 2 years ago
• GamehunterKaan / Plog
  A Mimikatz For Only Extracting Login Passwords.(Bypasses Most AV's)
  ☆57Updated 3 years ago
• Kara-4search / DInvoke_shellcodeload_CSharp
  ShellCodeLoader via DInvoke
  ☆55Updated 3 years ago
• JDArmy / NO445-lateral-movement
  command execute without 445 port
  ☆53Updated 3 years ago
• dust-life / Free445-BOF
  ☆21Updated last year
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆54Updated 11 months ago
• timwhitez / Doge-RecycledGate
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆32Updated 3 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆43Updated 3 years ago
• cyndicatelabs / GodPotato_CLR
  A Custom CLR Assembly for MSSQL of the popular tool GodPotato
  ☆71Updated last year
• ASkyeye / AB
  Cs-Sleep-Mask-Fiber
  ☆17Updated 6 months ago
• aleenzz / SCExec
  ☆30Updated 2 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 2 years ago
• Ridter / MSSQL_CLR
  MSSQL CLR for pentest.
  ☆54Updated last year
• scareing / cmd2shellcode
  cmd2shellcode
  ☆78Updated 3 years ago
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆81Updated last year
• AgeloVito / self_delete_bof
  BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…
  ☆71Updated last year
• WafflesExploits / CobaltStrike-YARA-Bypass-f0b627fc
  Repository of scripts from my blog post on bypassing the YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellco…
  ☆35Updated 5 months ago
• aleenzz / ADExplorerX
  ☆45Updated 9 months ago
• OG-Sadpanda / SharpZippo
  List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly
  ☆58Updated 2 years ago
• apkc / CVE-2024-26229-BOF
  BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel
  ☆21Updated 9 months ago