Alternatives and similar repositories for RPC-Racer

Users that are interested in RPC-Racer are comparing it to the libraries listed below

• p0dalirius / FindProcessesWithNamedPipes
  A simple C++ Windows tool to get information about processes exposing named pipes.
  ☆39Updated 10 months ago
• lap1nou / CLR_Heap_encryption
  ☆100Updated 2 years ago
• decoder-it / RelabelAbuse
  ☆64Updated last year
• zero2504 / Fairy-Law
  Fairy Law - Compromise or disable EDR security solutions
  ☆61Updated last month
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆85Updated last year
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆62Updated last year
• passthehashbrowns / VectoredExceptionHandling
  ☆98Updated last year
• deh00ni / NtDumpBOF
  ☆100Updated last year
• entropy-z / PostEx-Arsenal
  Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, lateral moviment (scm, winrm, dcom,…
  ☆90Updated last month
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆84Updated 8 months ago
• Cobalt-Strike / icmp-udc2
  UDC2 implementation that provides an ICMP C2 channel
  ☆111Updated last month
• xforcered / VectoredExceptionHandling
  ☆35Updated last year
• Teach2Breach / pool_party_rs
  remote process injections using pool party techniques
  ☆69Updated 6 months ago
• susMdT / ForsHops
  ForsHops
  ☆59Updated 9 months ago
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆145Updated 2 weeks ago
• 0xTriboulet / emerald_template
  A cmake template for crystal palace
  ☆35Updated 2 weeks ago
• 0xthirteen / rpc2wc
  RPC to WebClient startup
  ☆53Updated 4 months ago
• mhaskar / FsquirtCPLPoC
  PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin
  ☆86Updated this week
• rasta-mouse / Crystal-Loaders
  A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike
  ☆180Updated 2 months ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆41Updated 2 years ago
• NUL0x4C / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆61Updated 7 months ago
• nickvourd / SugarFree
  Less sugar (entropy) for your binaries
  ☆34Updated 4 months ago
• safedv / GPOAnalyzer
  GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.
  ☆28Updated last year
• logangoins / BadTakeover-BOF
  Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover
  ☆85Updated 2 months ago
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆76Updated 2 months ago
• WKL-Sec / slack-udc2
  Cobalt Strike UDC2 implementation that provides an Slack C2 channel
  ☆52Updated this week
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆83Updated last year
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆83Updated 9 months ago
• ofasgard / execute-assembly-pico
  A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.
  ☆124Updated last month
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆138Updated last year