Shrfnt77 / AmsiBypass

Related projects ⓘ

Alternatives and complementary repositories for AmsiBypass

• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• Mr-Un1k0d3r / BOFCode
  Bunch of BOF files
  ☆24Updated 9 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated 4 months ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆38Updated last year
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆40Updated last week
• synacktiv / AADOutsider-py
  Python3 rewrite of AsOutsider features of AADInternals
  ☆35Updated 2 months ago
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆62Updated 11 months ago
• D4rthMaulCop / DumpKernel-S1
  A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80
  ☆18Updated 11 months ago
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆31Updated 2 weeks ago
• OffenseTeacher / Steganim
  ☆47Updated last year
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated 6 months ago
• delivr-to / MailCollector
  A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM
  ☆18Updated 5 months ago
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆48Updated 2 years ago
• a7t0fwa7 / SymProcSleuth
  A pure C version of SymProcAddress
  ☆23Updated 8 months ago
• VirtualAlllocEx / Create_Thread_Inline_Assembly_x86
  This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly
  ☆17Updated last year
• FuzzySecurity / SAFACon-Vienna
  ☆22Updated 6 months ago
• kopp0ut / godropit
  Purple Team Dropper generator using open source templates.
  ☆14Updated 5 months ago
• xforcered / VectoredExceptionHandling
  ☆27Updated 3 months ago
• Hackcraft-Labs / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆33Updated last year
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year
• skylerknecht / messenger
  SOCKS5 over WebSockets and HTTP
  ☆13Updated last week
• paranoidninja / BRC4-Seminar-Stage-I
  These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be…
  ☆18Updated last year
• Bl4ckM1rror / PEAs
  ☆58Updated 11 months ago
• netbiosX / GhostLoader
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆51Updated 4 years ago
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆37Updated last year
• rasta-mouse / KerbApp
  ☆28Updated 5 months ago
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆32Updated 2 years ago
• Allevon412 / BreadManModuleStomping
  ☆38Updated last year