Alternatives and similar repositories for Invoke-EDRChecker

Users that are interested in Invoke-EDRChecker are comparing it to the libraries listed below

• n00py / LAPSDumper
  Dumping LAPS from Python
  ☆280Updated 2 years ago
• Cobalt-Strike / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆232Updated 2 months ago
• ZeroDayLab / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆236Updated 3 years ago
• Flangvik / AMSI.fail
  C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
  ☆421Updated last year
• samratashok / RACE
  RACE is a PowerShell module for executing ACL attacks against Windows targets.
  ☆233Updated 2 years ago
• rasta-mouse / AmsiScanBufferBypass
  Bypass AMSI by patching AmsiScanBuffer
  ☆274Updated 4 years ago
• SecuProject / ADenum
  AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with…
  ☆305Updated 2 years ago
• mdsecactivebreach / Farmer
  ☆400Updated 4 years ago
• trustedsec / orpheus
  Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types
  ☆402Updated 7 months ago
• mandiant / ADFSpoof
  ☆408Updated 4 months ago
• post-cyberlabs / Offensive_tools
  ☆412Updated last year
• mlgualtieri / NTLMRawUnHide
  NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The …
  ☆371Updated last year
• BC-SECURITY / Malleable-C2-Profiles
  Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.
  ☆381Updated 2 years ago
• PwnDexter / SharpEDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆725Updated 3 months ago
• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆444Updated 2 years ago
• GhostPack / ForgeCert
  "Golden" certificates
  ☆705Updated last year
• rvazarkar / GMSAPasswordReader
  ☆242Updated 2 years ago
• layer8secure / SilentHound
  Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
  ☆491Updated 2 years ago
• RedSiege / EDD
  Enumerate Domain Data
  ☆333Updated 2 years ago
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆399Updated 2 months ago
• ZeroPointSecurity / PhishingTemplates
  ☆200Updated 6 years ago
• Dec0ne / ShadowSpray
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆473Updated 3 years ago
• padovah4ck / PSByPassCLM
  Bypass for PowerShell Constrained Language Mode
  ☆401Updated 3 years ago
• cfalta / PowerShellArmoury
  A PowerShell armoury for security guys and girls
  ☆470Updated last year
• wavestone-cdt / powerpxe
  Powershell script to extract information from boot PXE
  ☆149Updated 6 years ago
• dievus / lnkbomb
  Malicious shortcut generator for collecting NTLM hashes from insecure file shares.
  ☆340Updated last year
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆901Updated 4 years ago
• latortuga71 / TortugaToolKit
  Collection of some of my own tools with other great open source tools out there packaged into a powershell module
  ☆144Updated 3 years ago
• calebstewart / bypass-clm
  PowerShell Constrained Language Mode Bypass
  ☆281Updated 4 years ago
• juliourena / plaintext
  ☆153Updated last month