Alternatives and similar repositories for EasyNet

Users that are interested in EasyNet are comparing it to the libraries listed below

• NetSPI / MonkeyWorks
  ☆61Updated last year
• med0x2e / NoAmci
  Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().
  ☆216Updated 5 years ago
• FuzzySecurity / Dendrobate
  Managed code hooking template.
  ☆131Updated 3 years ago
• ambray / ProcessHollowing
  Simple Process Hollowing in C#
  ☆69Updated 7 years ago
• TheWover / Manager
  Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
  ☆63Updated 5 years ago
• antman1p / SharpProcEnum
  .NET tool for enumeration processes and dumping memory.
  ☆56Updated 6 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆74Updated 5 years ago
• leoloobeek / csharp
  Various C# projects for offensive security
  ☆109Updated 5 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆41Updated 6 years ago
• badBounty / directInjectorPOC
  Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.
  ☆84Updated 5 years ago
• med0x2e / NET-Assembly-Inject-Remote
  .NET assembly local/remote loading/injection into memory.
  ☆133Updated 5 years ago
• n1xbyte / donutCS
  dem sharp donuts
  ☆196Updated 2 years ago
• Soledge / BlockEtw
  .Net Assembly to block ETW telemetry in current process
  ☆78Updated 4 years ago
• mdsecactivebreach / Browser-ExternalC2
  External C2 Using IE COM Objects
  ☆100Updated 6 years ago
• HackingThings / SneakyExec
  C# code to run shellcode in a sneaky way
  ☆90Updated 4 years ago
• djhohnstein / .NET-Profiler-DLL-Hijack
  Implementation of the .NET Profiler DLL hijack in C#
  ☆98Updated 6 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆88Updated last year
• outflanknl / TamperETW
  PoC to demonstrate how CLR ETW events can be tampered.
  ☆188Updated 5 years ago
• cobbr / SharpShell
  SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framew…
  ☆126Updated 6 years ago
• rvrsh3ll / MSBuildAPICaller
  MSBuild Without MSBuild.exe
  ☆156Updated 4 years ago
• xpn / DotNetDebug
  A simple POC to demonstrate the power of .NET debugging for injection
  ☆72Updated 4 years ago
• mdsecactivebreach / WMIPersistence
  WMI Event Subscription Persistence in C#
  ☆113Updated 5 years ago
• p3nt4 / RunDLL.Net
  Execute .Net assemblies using Rundll32.exe
  ☆110Updated 4 years ago
• hlldz / APC-PPID
  Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
  ☆157Updated 5 years ago
• jhalon / SharpCall
  Simple PoC demonstrating syscall execution in C#
  ☆154Updated 5 years ago
• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 5 years ago
• Flangvik / RosFuscator
  YouTube/Livestream project for obfuscating C# source code using Roslyn
  ☆126Updated 4 years ago
• apt69 / RibeyeSpecial
  medium-rare
  ☆28Updated 5 years ago
• FSecureLABS / SharpGPO-RemoteAccessPolicies
  A C# tool for enumerating remote access policies through group policy.
  ☆73Updated 6 years ago
• malcomvetter / NamedPipes
  A pattern for client/server communication via Named Pipes via C#
  ☆97Updated 6 years ago