Alternatives and similar repositories for Expeditus

Users that are interested in Expeditus are comparing it to the libraries listed below

• S3cur3Th1sSh1t / SharpUnhooker
  C# Based Universal API Unhooker - Automatically Unhook API Hives (ntdll.dll,kernel32.dll,user32.dll,and kernelbase.dll)
  ☆25Updated 2 years ago
• TestingPens / CPLDropper
  A Control Panel Applet dropper project. It has a high success rate on engagements since nobody cares about .CPL files and you can just do…
  ☆53Updated 7 years ago
• nopbrick / CobaltStrike-Redirector
  C2 redirector as a web API
  ☆10Updated 4 years ago
• praetorian-inc / Matryoshka
  Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.
  ☆41Updated 4 years ago
• cham423 / cs-tools
  cobalt strike tools
  ☆31Updated 4 years ago
• icyguider / PowerChunker
  Bypass AMSI via PowerShell by splitting a file into multiple chunks
  ☆53Updated 4 years ago
• PorLaCola25 / TransactedSharpMiniDump
  Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…
  ☆71Updated 5 years ago
• rasta-mouse / Covenant
  Covenant is a collaborative .NET C2 framework for red teamers.
  ☆13Updated 3 years ago
• RedSiege / RandomScripts
  Scripts for public use that we've randomly written, or have updated from other people's work.
  ☆40Updated last year
• dtrizna / DotNetInject
  Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.
  ☆37Updated 5 years ago
• rasta-mouse / AMSITrigger
  The Hunt for Malicious Strings
  ☆13Updated 5 years ago
• Flangvik / SharpAppLocker
  C# port of the Get-AppLockerPolicy PS cmdlet
  ☆100Updated 3 years ago
• kyleavery / ThirdEye
  Weaponizing CLRvoyance for Post-Ex .NET Execution
  ☆38Updated 4 years ago
• S3cur3Th1sSh1t / SharpOxidResolver
  IOXIDResolver from AirBus Security/PingCastle
  ☆51Updated 5 years ago
• maninwire / nimLoader
  load dumped csharp binaries as assemblies and launch them in memory
  ☆28Updated last year
• mgeeky / CustomXMLPart
  A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.
  ☆39Updated 3 years ago
• GetRektBoy724 / ReversePowernoid
  Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)
  ☆30Updated 3 years ago
• wsummerhill / Malware_Weaponization
  A curated list of tools and techniques written from experience in weaponization of malware
  ☆39Updated 2 years ago
• threatexpress / mythic2modrewrite
  Generate Apache mod_rewrite rules for Mythic C2 profiles
  ☆35Updated 4 years ago
• claissg / humble_chameleon
  Eating 2FA for Breakfast
  ☆58Updated 3 years ago
• Sh11td0wn / winrm_kerb_shell
  Ruby script that calls an almost interactive shell via WinRM (TCP/5985) on an Windows machine, relaying on a valid Kerberos ticket. (Very…
  ☆18Updated 6 years ago
• EspressoCake / Process_Protection_Level_BOF
  ☆60Updated 4 years ago
• ByteJunkies-co-uk / Metsubushi
  Generate droppers with encrypted payloads automatically.
  ☆54Updated 4 years ago
• V1V1 / SharpScribbles
  My doodles as I learn C#
  ☆76Updated 5 years ago
• tommelo / lnk2pwn
  Malicious Shortcut(.lnk) Generator
  ☆86Updated 7 years ago
• rasta-mouse / RuralBishop
  D/Invoke port of UrbanBishop
  ☆108Updated 5 years ago
• ScriptIdiot / BeaconNotifier-Discord
  Cobalt strike CNA script to notify you via Discord whenever there is a new beacon.
  ☆33Updated 3 years ago
• 0xS2V2 / marsform
  terraform deployment for red team
  ☆26Updated 3 years ago
• redteamertips / DinvokeDupetokenAndThreadSwitcheroo
  ☆26Updated 4 years ago
• jnqpblc / SharpSvc
  SharpSvc is a simple code set to interact with the SC Manager API and is compatible with Cobalt Strike.
  ☆26Updated 2 years ago