Alternatives and similar repositories for KillDefender_BOF:

Users that are interested in KillDefender_BOF are comparing it to the libraries listed below

• Hagrid29 / BOF-DCOMPotato-PrintNotify
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆45Updated 2 years ago
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp
  Load shellcode via syscall
  ☆53Updated 3 years ago
• m1ddl3w4r3 / ExecRemoteNET
  Execute Remote Assembly with args passing and with AMSI and ETW patching .
  ☆32Updated 2 years ago
• Hagrid29 / BOF-SprayAD
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆47Updated 2 years ago
• timwhitez / Doge-DumpMem
  dump lsass
  ☆37Updated 2 years ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆44Updated 2 years ago
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆54Updated last year
• dust-life / Free445-BOF
  ☆23Updated last week
• Kara-4search / DInvoke_shellcodeload_CSharp
  ShellCodeLoader via DInvoke
  ☆56Updated 3 years ago
• JDArmy / Lsass-Shtinkering
  dump lsass tool
  ☆39Updated 2 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆40Updated last year
• cyndicatelabs / GodPotato_CLR
  A Custom CLR Assembly for MSSQL of the popular tool GodPotato
  ☆75Updated last year
• Like0x / AddDefenderExclusions-BOF
  AddDefenderExclusions Beacon Object File
  ☆37Updated last year
• Ridter / MSSQL_CLR
  MSSQL CLR for pentest.
  ☆53Updated last year
• Jumbo-WJB / SharpAllowedToAct-Modify
  resource-based constrained delegation RBCD
  ☆44Updated 3 years ago
• AgeloVito / self_delete_bof
  BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…
  ☆73Updated last year
• BambiZombie / bypass_uac_bof
  一个普通的BOF用来BypassUAC
  ☆21Updated last year
• timwhitez / Doge-RecycledGate
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆32Updated 3 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆43Updated 3 years ago
• JDArmy / NO445-lateral-movement
  command execute without 445 port
  ☆52Updated 3 years ago
• GamehunterKaan / Plog
  A Mimikatz For Only Extracting Login Passwords.(Bypasses Most AV's)
  ☆57Updated 3 years ago
• seventeenman / SelfDel-BOF
  Delete file regardless of whether the handle is used via SetFileInformationByHandle
  ☆43Updated last year
• ShadowMccc / MemoryEvasion
  A Cobalt Strike memory evasion loader for redteamers
  ☆99Updated 2 years ago
• apkc / CVE-2024-26229-BOF
  BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel
  ☆22Updated 10 months ago
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆81Updated last year
• P0x00 / ASPX_Bonanza
  ASPX ShellCode Loader
  ☆50Updated last year
• timwhitez / memmod
  Fork & modify of Wireguard's Memmod
  ☆32Updated last year
• M0nster3 / ITaskServers
  Bypass EDR Create TaskServers
  ☆36Updated 2 years ago
• Cobalt-Strike / callback_examples
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆32Updated last month