Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.
☆761Feb 24, 2026Updated 8 months ago
Alternatives and similar repositories for SharpEDRChecker
Users that are interested in SharpEDRChecker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…☆281Oct 9, 2023Updated 3 years ago
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆1,172Mar 31, 2021Updated 5 years ago
- The Hunt for Malicious Strings☆1,425May 13, 2025Updated last year
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆614Feb 16, 2023Updated 3 years ago
- Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…☆887Mar 29, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- StandIn is a small .NET35/45 AD post-exploitation toolkit☆878Dec 2, 2023Updated 2 years ago
- Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensi…☆4,749Jan 10, 2025Updated last year
- A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…☆273May 3, 2023Updated 3 years ago
- ☆666Nov 17, 2021Updated 4 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,676Jul 10, 2023Updated 3 years ago
- Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS head…☆598Jul 26, 2021Updated 5 years ago
- A .NET Runtime for Cobalt Strike's Beacon Object Files☆792Sep 4, 2024Updated 2 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,888Aug 18, 2023Updated 3 years ago
- Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands☆1,020Nov 7, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- C# implementation of harmj0y's PowerView☆1,108Mar 22, 2024Updated 2 years ago
- Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019☆1,845Sep 4, 2024Updated 2 years ago
- LSASS memory dumper using direct system calls and API unhooking.☆1,596Jan 5, 2021Updated 5 years ago
- OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…☆544Sep 18, 2022Updated 4 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆813Aug 28, 2022Updated 4 years ago
- SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GP…☆1,362Dec 15, 2020Updated 5 years ago
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆878Mar 20, 2023Updated 3 years ago
- ☆1,536Aug 11, 2023Updated 3 years ago
- Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.☆2,526Feb 24, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆2,211Apr 3, 2026Updated 6 months ago
- Collection of beacon BOF written to learn windows and cobaltstrike☆360Feb 24, 2023Updated 3 years ago
- Collection of Offensive C# Tooling☆1,473Feb 6, 2023Updated 3 years ago
- ☆1,712Apr 14, 2025Updated last year
- .NET Project for performing Authenticated Remote Execution☆410Feb 8, 2023Updated 3 years ago
- Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.☆791Dec 21, 2022Updated 3 years ago
- "Golden" certificates☆713Aug 17, 2024Updated 2 years ago
- Template-Driven AV/EDR Evasion Framework☆1,836Nov 3, 2023Updated 2 years ago
- Open-Source Shellcode & PE Packer☆2,144Feb 3, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.☆1,126Apr 13, 2026Updated 6 months ago
- Cobalt Strike kit for Lateral Movement☆676Feb 21, 2020Updated 6 years ago
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆450Mar 8, 2023Updated 3 years ago
- Identifies the bytes that Microsoft Defender flags on.☆2,644Dec 31, 2025Updated 10 months ago
- Situational Awareness commands implemented using Beacon Object Files☆1,918Sep 25, 2026Updated last month
- Collection of Beacon Object Files☆641Nov 1, 2022Updated 4 years ago
- Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …☆959Nov 11, 2024Updated last year