Alternatives and similar repositories for LsassReflectDumping

Users that are interested in LsassReflectDumping are comparing it to the libraries listed below

• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆302Updated 6 months ago
• mandiant / ccmpwn
  ☆203Updated last year
• decoder-it / KrbRelay-SMBServer
  ☆219Updated 7 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆106Updated 10 months ago
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS
  ☆147Updated 3 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆136Updated 3 weeks ago
• NtDallas / Svartalfheim
  Stage 0
  ☆160Updated 5 months ago
• cybersectroll / TrollAMSI
  ☆176Updated last week
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆200Updated 11 months ago
• decoder-it / KrbRelayEx-RPC
  ☆180Updated 2 months ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆115Updated 2 months ago
• logangoins / SharpSuccessor
  SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.
  ☆278Updated last week
• ZERODETECTION / MSC_Dropper
  ☆164Updated 10 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆149Updated 8 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆180Updated last month
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆187Updated 6 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆165Updated 2 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆147Updated last year
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆162Updated last month
• powerseb / PowerExtract
  ☆117Updated 2 months ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆223Updated last month
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆178Updated last year
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆167Updated 2 months ago
• coffeegist / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆229Updated 2 weeks ago
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆139Updated 2 months ago
• sevagas / Advanced_Initial_access_in_2024_OffensiveX
  Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
  ☆137Updated 9 months ago
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆200Updated 3 months ago
• t94j0 / adexplorersnapshot-rs
  ☆80Updated 10 months ago
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆142Updated last month
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆149Updated 7 months ago