Alternatives and similar repositories for Malware-Development

Users that are interested in Malware-Development are comparing it to the libraries listed below

• outflanknl / Training-MSOfficeOffensiveTradecraft
  Info related to the Outflank training: Microsoft Office Offensive Tradecraft
  ☆51Updated last year
• Pascal-0x90 / sideloadr
  Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).
  ☆58Updated 3 years ago
• sidaf / moonshine
  ☆70Updated 2 years ago
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆44Updated last year
• AssuranceMaladieSec / FoxTerrier
  Python tool to find vulnerable AD object and generating csv report
  ☆26Updated 3 years ago
• Helixo32 / DetectHooks
  Detect userland hooks placed by AV/EDR
  ☆28Updated 2 years ago
• heartburn-dev / PKI-Escalate
  Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…
  ☆29Updated 2 years ago
• redr0nin / bloudstrike
  Linux CS bypass technique
  ☆32Updated 10 months ago
• Helixo32 / SimpleEDR
  Simple EDR that injects a DLL into a process to place a hook on specific Windows API
  ☆96Updated 2 years ago
• 0xv1n / Havoc-ProfileGenerator
  malleable profile generator GUI for Havoc
  ☆54Updated 2 years ago
• Bl4ckM1rror / PEAs
  ☆61Updated 2 years ago
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆25Updated 9 months ago
• myexploit / living_off_the_land
  ☆44Updated last year
• mlcsec / SharpGraphView
  Microsoft Graph API post-exploitation toolkit
  ☆95Updated last year
• 0xNinjaCyclone / IATUnhooker
  IAT Unhooking proof-of-concept
  ☆34Updated last year
• MartinoTommasini / offlineSCCMdecrypt
  Step-by-step documentation on how to decrypt SCCM database secrets offline
  ☆48Updated 2 months ago
• OtterHacker / Cerbere
  ☆49Updated 2 years ago
• OtterHacker / ShareFouine
  ☆52Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆33Updated 11 months ago
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆42Updated last week
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆90Updated 4 months ago
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆33Updated last year
• ACE-Responder / rpcfirewall-extended-telemetry
  ☆15Updated last year
• b4r0nd3l4b1rr4 / Teams-CS-Notifier
  ☆15Updated 2 years ago
• ToweringDragoon / SACL_Scanner
  SACL Scanner is a tool designed to scan and analyze SACLs.
  ☆48Updated 10 months ago
• mgeeky / msi-shenanigans
  Proof of Concept code and samples presenting emerging threat of MSI installer files.
  ☆88Updated 3 years ago
• a7t0fwa7 / SymProcSleuth
  A pure C version of SymProcAddress
  ☆30Updated last year
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated last year
• HackmichNet / SharpAzToken
  ☆64Updated last year
• nettitude / SharpConflux
  ☆65Updated last year