Alternatives and similar repositories for UserManagerEoP:

Users that are interested in UserManagerEoP are comparing it to the libraries listed below

• Leo4j / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆44Updated last month
• carsonchan12345 / CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
  ☆33Updated 2 months ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆76Updated 4 months ago
• Wh04m1001 / GamingServiceEoP5
  ☆27Updated 9 months ago
• realstatus / CVE-2024-40711-Exp
  CVE-2024-40711-exp
  ☆38Updated 4 months ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆44Updated 5 months ago
• cybersectroll / TrollDump
  ☆80Updated 9 months ago
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆74Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆53Updated last year
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆114Updated last year
• xalicex / LOLDrivers_finder
  ☆75Updated last year
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆70Updated last month
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆54Updated last month
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆92Updated last year
• lap1nou / CLR_Heap_encryption
  ☆97Updated last year
• dosxuz / PerunsFart
  This is my own implementation of the Perun's Fart technique by Sektor7
  ☆68Updated 2 years ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆39Updated last year
• Cobalt-Strike / obfuscator-llvm
  ☆43Updated last year
• dru1d-foofus / GetLAPSPassword
  A LAPS dumper written using the impacket library.
  ☆31Updated last year
• c3r3br4t3 / ShadowRDP
  ☆63Updated last year
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆82Updated last year
• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated last year
• Wh04m1001 / RazerEoP
  ☆25Updated 2 years ago
• shantanu561993 / DLL-Sideload
  ☆39Updated 2 years ago
• jsecu / ModTask
  ☆52Updated last month
• Patrick0x41 / BOF_All_Things
  Beacon Object Files (BOF) for Cobalt Strike.
  ☆27Updated 5 months ago
• x0rb3l / CVE-2023-36802-MSKSSRV-LPE
  PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy
  ☆35Updated last year
• jsecurity101 / RandomPOCs
  Repo that holds random POCs
  ☆48Updated last year
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆97Updated last year
• rasta-mouse / KerbApp
  ☆28Updated 8 months ago