Alternatives and similar repositories for Invoke-EDRChecker

Users that are interested in Invoke-EDRChecker are comparing it to the libraries listed below

• n00py / LAPSDumper
  Dumping LAPS from Python
  ☆275Updated 2 years ago
• BC-SECURITY / Malleable-C2-Profiles
  Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.
  ☆379Updated 2 years ago
• rasta-mouse / AmsiScanBufferBypass
  Bypass AMSI by patching AmsiScanBuffer
  ☆269Updated 4 years ago
• mlgualtieri / NTLMRawUnHide
  NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The …
  ☆358Updated last year
• Cobalt-Strike / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆229Updated 2 weeks ago
• SecuProject / ADenum
  AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with…
  ☆303Updated 2 years ago
• ZeroDayLab / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆234Updated 3 years ago
• Flangvik / AMSI.fail
  C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
  ☆416Updated 11 months ago
• PwnDexter / SharpEDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆721Updated last month
• post-cyberlabs / Offensive_tools
  ☆412Updated last year
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆887Updated 4 years ago
• mdsecactivebreach / Farmer
  ☆394Updated 4 years ago
• mandiant / ADFSpoof
  ☆404Updated 2 months ago
• padovah4ck / PSByPassCLM
  Bypass for PowerShell Constrained Language Mode
  ☆398Updated 3 years ago
• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆443Updated 2 years ago
• RedSiege / EDD
  Enumerate Domain Data
  ☆332Updated last year
• layer8secure / SilentHound
  Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
  ☆492Updated 2 years ago
• samratashok / RACE
  RACE is a PowerShell module for executing ACL attacks against Windows targets.
  ☆231Updated 2 years ago
• GoSecure / pywsus
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
  ☆319Updated 2 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆430Updated 3 years ago
• calebstewart / bypass-clm
  PowerShell Constrained Language Mode Bypass
  ☆276Updated 4 years ago
• rvazarkar / GMSAPasswordReader
  ☆232Updated 2 years ago
• Dec0ne / ShadowSpray
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆474Updated 2 years ago
• GhostPack / ForgeCert
  "Golden" certificates
  ☆700Updated last year
• ZeroPointSecurity / PhishingTemplates
  ☆199Updated 5 years ago
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆554Updated last week
• juliourena / plaintext
  ☆149Updated last year
• trustedsec / orpheus
  Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types
  ☆397Updated 5 months ago
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆397Updated last week
• boku7 / azureOutlookC2
  Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for…
  ☆487Updated 2 years ago