Alternatives and similar repositories for hot-manchego

Users that are interested in hot-manchego are comparing it to the libraries listed below

• rvrsh3ll / Rubeus-Rundll32
  Run Rubeus via Rundll32
  ☆202Updated 5 years ago
• rasta-mouse / GadgetToJScript
  A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …
  ☆85Updated 5 years ago
• Flangvik / AzureC2Relay
  AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…
  ☆223Updated 4 years ago
• py7hagoras / CovenantTasks
  Source for tasks I have used with Covenant
  ☆120Updated 4 years ago
• invokethreatguy / AggressorCollection
  Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors
  ☆154Updated 6 years ago
• FatRodzianko / Get-RBCD-Threaded
  Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments
  ☆124Updated 3 years ago
• xforcered / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆258Updated 3 years ago
• outflanknl / FindObjects-BOF
  A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…
  ☆272Updated 2 years ago
• cwolff411 / powerob
  An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.
  ☆141Updated 3 years ago
• 3xpl01tc0d3r / Callidus
  ☆163Updated 2 years ago
• shantanu561993 / SharpLoginPrompt
  ☆135Updated 4 years ago
• bohops / GhostBuild
  GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
  ☆248Updated 4 years ago
• bohops / WSMan-WinRM
  A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object
  ☆239Updated 5 years ago
• awsmhacks / awsmBloodhoundCustomQueries
  Collection of cyphers for bloodhound
  ☆151Updated last year
• EncodeGroup / UAC-SilentClean
  New UAC bypass for Silent Cleanup for CobaltStrike
  ☆192Updated 4 years ago
• jfmaes / TrustJack
  Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows
  ☆143Updated 5 years ago
• rvrsh3ll / SharpCOM
  CSHARP DCOM Fun
  ☆132Updated 5 years ago
• xforcered / CredBandit
  Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…
  ☆243Updated 4 years ago
• rvrsh3ll / NoMSBuild
  MSBuild without MSbuild.exe
  ☆132Updated 4 years ago
• jnqpblc / SharpSpray
  SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt…
  ☆196Updated 6 years ago
• jfmaes / SharpHandler
  ☆185Updated 4 years ago
• zer1t0 / ticket_converter
  A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
  ☆167Updated 3 years ago
• darkoperator / vscode-language-aggressor
  Cobalt Strike Aggressor extension for Visual Studio Code
  ☆134Updated last year
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆144Updated 4 years ago
• rvrsh3ll / SharpSMBSpray
  Spray a hash via smb to check for local administrator access
  ☆143Updated 4 years ago
• riskydissonance / SafetyDump
  Dump stuff without touching disk
  ☆164Updated 4 years ago
• rvrsh3ll / MSBuildAPICaller
  MSBuild Without MSBuild.exe
  ☆156Updated 4 years ago
• BC-SECURITY / Invoke-PrintDemon
  This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.
  ☆202Updated 4 years ago
• NetSPI / DAFT
  DAFT: Database Audit Framework & Toolkit
  ☆179Updated 3 years ago
• fox-it / LDAPFragger
  ☆193Updated 5 years ago