Alternatives and similar repositories for KillDefender_BOF

Users that are interested in KillDefender_BOF are comparing it to the libraries listed below

• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• Hagrid29 / BOF-DCOMPotato-PrintNotify
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆49Updated 2 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp
  Load shellcode via syscall
  ☆54Updated 3 years ago
• timwhitez / Doge-DumpMem
  dump lsass
  ☆37Updated 3 years ago
• m1ddl3w4r3 / ExecRemoteNET
  Execute Remote Assembly with args passing and with AMSI and ETW patching .
  ☆33Updated 2 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆40Updated last year
• AgeloVito / self_delete_bof
  BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…
  ☆74Updated last year
• JDArmy / NO445-lateral-movement
  command execute without 445 port
  ☆52Updated 3 years ago
• Hagrid29 / BOF-SprayAD
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆47Updated 2 years ago
• dust-life / Free445-BOF
  ☆23Updated last month
• JDArmy / Lsass-Shtinkering
  dump lsass tool
  ☆39Updated 2 years ago
• Jumbo-WJB / SharpAllowedToAct-Modify
  resource-based constrained delegation RBCD
  ☆44Updated 3 years ago
• Kara-4search / DInvoke_shellcodeload_CSharp
  ShellCodeLoader via DInvoke
  ☆56Updated 3 years ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆45Updated 2 years ago
• GamehunterKaan / Plog
  A Mimikatz For Only Extracting Login Passwords.(Bypasses Most AV's)
  ☆57Updated 3 years ago
• StarfireLab / BrowserPivot
  ☆31Updated last year
• P0x00 / ASPX_Bonanza
  ASPX ShellCode Loader
  ☆50Updated last year
• aleenzz / SCExec
  ☆30Updated 2 years ago
• XiaoliChan / Invoke-sAMSpoofing
  CVE-2021-42287/CVE-2021-42278 exploits in powershell
  ☆37Updated 3 years ago
• WafflesExploits / CobaltStrike-YARA-Bypass-f0b627fc
  Repository of scripts from my blog post on bypassing the YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellco…
  ☆39Updated 7 months ago
• Ridter / MSSQL_CLR
  MSSQL CLR for pentest.
  ☆54Updated last year
• ASkyeye / AB
  Cs-Sleep-Mask-Fiber
  ☆18Updated 2 weeks ago
• scareing / cmd2shellcode
  cmd2shellcode
  ☆79Updated 4 years ago
• Like0x / AddDefenderExclusions-BOF
  AddDefenderExclusions Beacon Object File
  ☆38Updated last year
• timwhitez / Doge-RecycledGate
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆32Updated 3 years ago
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆55Updated last year
• cyndicatelabs / GodPotato_CLR
  A Custom CLR Assembly for MSSQL of the popular tool GodPotato
  ☆76Updated last year
• aleenzz / ADExplorerX
  ☆45Updated 11 months ago
• b4nbird / shellcodeLoaders
  ☆26Updated last year
• M0nster3 / ITaskServers
  Bypass EDR Create TaskServers
  ☆37Updated 2 years ago