Alternatives and similar repositories for Forensia:

Users that are interested in Forensia are comparing it to the libraries listed below

• lem0nSec / ShellGhost
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆1,168Updated last year
• Xacone / BestEdrOfTheMarket
  AV/EDR Evasion Lab for Training & Learning Purposes
  ☆1,087Updated last week
• Idov31 / Sandman
  Sandman is a NTP based backdoor for red team engagements in hardened networks.
  ☆781Updated 9 months ago
• 0xHossam / Killer
  Killer is a simple tool designed to bypass AV/EDR security tools using various evasive techniques.
  ☆778Updated 6 months ago
• assume-breach / Home-Grown-Red-Team
  ☆686Updated 10 months ago
• ZeroMemoryEx / Terminator
  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
  ☆939Updated last year
• JoelGMSec / PSRansom
  PowerShell Ransomware Simulator with C2 Server
  ☆476Updated last year
• RedSiege / GraphStrike
  Cobalt Strike HTTPS beaconing over Microsoft Graph API
  ☆564Updated 7 months ago
• VirtualAlllocEx / DEFCON-31-Syscalls-Workshop
  Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
  ☆646Updated last year
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,172Updated last year
• netero1010 / EDRSilencer
  A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …
  ☆1,575Updated 2 months ago
• chvancooten / NimPlant
  A light-weight first-stage C2 implant written in Nim (and Rust).
  ☆823Updated 5 months ago
• Xre0uS / MultiDump
  MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.
  ☆504Updated 5 months ago
• Meckazin / ChromeKatz
  Dump cookies and credentials directly from Chrome/Edge process memory
  ☆1,111Updated 2 months ago
• icyguider / Shhhloader
  Syscall Shellcode Loader (Work in Progress)
  ☆1,151Updated 8 months ago
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆892Updated 7 months ago
• WKL-Sec / HiddenDesktop
  HVNC for Cobalt Strike
  ☆1,182Updated last year
• r4wd3r / Suborner
  ☆468Updated 2 months ago
• BlackSnufkin / LitterBox
  sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment
  ☆453Updated this week
• optiv / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆712Updated last year
• tkmru / awesome-edr-bypass
  Awesome EDR Bypass Resources For Ethical Hacking
  ☆1,062Updated last week
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆460Updated 11 months ago
• georgesotiriadis / Chimera
  Automated DLL Sideloading Tool With EDR Evasion Capabilities
  ☆465Updated last year
• naksyn / Pyramid
  a tool to help operate in EDRs' blind spots
  ☆682Updated last month
• Offensive-Panda / ShadowDumper
  Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advance…
  ☆430Updated 2 months ago
• Maldev-Academy / MaldevAcademyLdr.1
  ☆331Updated last year
• D00Movenok / BounceBack
  ↕️🤫 Stealth redirector for your red team operation security
  ☆650Updated 5 months ago
• SaadAhla / FilelessPELoader
  Loading Remote AES Encrypted PE in memory , Decrypted it and run it
  ☆909Updated last year
• redteamsocietegenerale / DLLirant
  DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.
  ☆484Updated 2 years ago
• BC-SECURITY / Moriarty
  Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in…
  ☆501Updated 5 months ago