Alternatives and similar repositories for SharpByeBear

Users that are interested in SharpByeBear are comparing it to the libraries listed below

• ajpc500 / RelayRumbler

  View on GitHub
  A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.
  ☆18Jul 2, 2021Updated 4 years ago
• Meckazin / HidingFromETW

  View on GitHub
  PoC for detecting and evading ETW detection of .Net Assembly.Load
  ☆21Aug 26, 2020Updated 5 years ago
• rasta-mouse / Fork-n-Run

  View on GitHub
  ☆73Oct 24, 2021Updated 4 years ago
• xenoscr / compressedCredBandit

  View on GitHub
  A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.
  ☆19Jun 24, 2021Updated 4 years ago
• TheWover / ModuleMonitor

  View on GitHub
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42May 9, 2019Updated 6 years ago
• rasta-mouse / CollectorService

  View on GitHub
  ☆54Apr 27, 2019Updated 6 years ago
• GetRektBoy724 / JALSI

  View on GitHub
  JALSI - Just Another Lame Shellcode Injector
  ☆30Aug 1, 2021Updated 4 years ago
• perturbed-platypus / UEFIReadCSharp

  View on GitHub
  ☆33Aug 10, 2019Updated 6 years ago
• NtRaiseHardError / MIST

  View on GitHub
  Minimal Intervention and Software Transformation - PoC Packer designed for AV detection bypass
  ☆18Nov 4, 2017Updated 8 years ago
• rvrsh3ll / PELoader

  View on GitHub
  Load PE via XML Attribute
  ☆32Feb 1, 2020Updated 6 years ago
• TheWover / ProcessManager

  View on GitHub
  ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.
  ☆13Aug 12, 2019Updated 6 years ago
• S3cur3Th1sSh1t / SharpPolarBear

  View on GitHub
  Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069
  ☆37Jun 26, 2019Updated 6 years ago
• NtRaiseHardError / Phage

  View on GitHub
  Reflective DLL Injection style process infector
  ☆20Jul 23, 2018Updated 7 years ago
• slyd0g / SharpCryptUnprotectData

  View on GitHub
  ☆15Feb 9, 2022Updated 4 years ago
• jthuraisamy / CVE-2019-9730

  View on GitHub
  Synaptics Audio Driver LPE
  ☆37Apr 15, 2019Updated 6 years ago
• xenoscr / SharpMailBOF

  View on GitHub
  A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.
  ☆15Jun 24, 2021Updated 4 years ago
• ThunderGunExpress / ThunderQuery

  View on GitHub
  ☆12Apr 21, 2019Updated 6 years ago
• bdunlap9 / Megalodon-HTTP-Botnet

  View on GitHub
  Control Panel and Builder (Working)
  ☆10Apr 15, 2017Updated 8 years ago
• matterpreter / SHAPESHIFTER

  View on GitHub
  Companion PoC for the "Adventures in Dynamic Evasion" blog post
  ☆130May 25, 2021Updated 4 years ago
• netbiosX / GhostLoader

  View on GitHub
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆53May 21, 2020Updated 5 years ago
• djhohnstein / TSMSISrv_poc

  View on GitHub
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆62Apr 18, 2019Updated 6 years ago
• perturbed-platypus / UEFIWriteCSharp

  View on GitHub
  ☆42Aug 10, 2019Updated 6 years ago
• mitchmoser / AtYourService

  View on GitHub
  Service Enumeration C# .NET Assembly
  ☆59Sep 14, 2021Updated 4 years ago
• rvrsh3ll / UACSilentCleanup

  View on GitHub
  ☆14Sep 22, 2019Updated 6 years ago
• rkzofficial / Horizon

  View on GitHub
  Remote Administration Tool, Server Written in C# and Client Written in C++
  ☆15Dec 8, 2022Updated 3 years ago
• ThunderGunExpress / ThunderChrome

  View on GitHub
  ☆36Mar 11, 2019Updated 6 years ago
• dtrizna / DInvoke_PoC

  View on GitHub
  Hardened Proof of Concept of D/Invoke Process Injection malware
  ☆42Jul 23, 2020Updated 5 years ago
• Gr1mmie / WMIEnum

  View on GitHub
  WMI SA stuffs
  ☆30Apr 18, 2022Updated 3 years ago
• 0x00-0x00 / CVE-2019-0841-BYPASS

  View on GitHub
  A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.
  ☆59Jun 11, 2019Updated 6 years ago
• emcghee / PayloadAutomation

  View on GitHub
  ☆121Jun 17, 2022Updated 3 years ago
• EvanMcBroom / sleepy

  View on GitHub
  A lexer and parser for Sleep
  ☆20May 14, 2025Updated 9 months ago
• NYAN-x-CAT / Csharp-Loader

  View on GitHub
  Download a .NET payload and run it on memory
  ☆70Apr 12, 2019Updated 6 years ago
• hashXploiter / darkcoders-net

  View on GitHub
  DarkC0ders net is a open source botnet which is programmed in C#, using the .NET 2.0 Framework.
  ☆10Dec 1, 2019Updated 6 years ago
• umarfarook882 / Win-LocalPriv-Escalation-polarbear

  View on GitHub
  Windows Local Privilege Escalation - 0 Day Vulnerability (schtasks.exe) released by @SandboxEscaper :)
  ☆17May 22, 2019Updated 6 years ago
• outflanknl / TamperETW

  View on GitHub
  PoC to demonstrate how CLR ETW events can be tampered.
  ☆192Mar 26, 2020Updated 5 years ago
• buffermet / sewers

  View on GitHub
  Modular rootkit framework.
  ☆30Mar 26, 2021Updated 4 years ago
• mdsecactivebreach / RegistryStrikesBack

  View on GitHub
  ☆53Oct 20, 2020Updated 5 years ago
• 0xflux / Vectored-Exception-Handling-Squared

  View on GitHub
  Vectored Exception Handling Squared
  ☆29Dec 27, 2025Updated last month
• Alexuiop1337 / Trojan-Downloader

  View on GitHub
  Trojan downloader simple virus
  ☆16Sep 30, 2018Updated 7 years ago