Alternatives and similar repositories for Invoke-GhostLog:

Users that are interested in Invoke-GhostLog are comparing it to the libraries listed below

• djhohnstein / CSharpCreateThreadExample
  C# code to run PIC using CreateThread
  ☆16Updated 5 years ago
• davehardy20 / PoSHBypass
  ☆24Updated 6 years ago
• ThunderGunExpress / ThunderMSI
  ☆28Updated 7 years ago
• dsnezhkov / RunDllMShim
  Run Managed Assemblies with RunDll
  ☆16Updated 6 years ago
• ceramicskate0 / AddReferenceDotRedTeam
  A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…
  ☆17Updated 4 years ago
• rvrsh3ll / SharpSSDP
  SSDP Service Discovery
  ☆16Updated 6 years ago
• jasondrawdy / ShellGen
  Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical she…
  ☆19Updated 4 years ago
• A-mIn3 / Windows_Postex
  Post-explotation Hacks
  ☆14Updated 6 years ago
• chango77747 / ShellCodeInjector_MsBuild
  ☆18Updated 7 years ago
• bohops / IISAppPoolCreds
  Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.
  ☆13Updated 7 years ago
• sevagas / weaponize_process_injection_windows_SIGSEGv2_2019
  Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog
  ☆13Updated 5 years ago
• FuzzySecurity / DotNetToJScript-LanguageModeBreakout
  ☆26Updated 6 years ago
• trustedsec / inProc_Evade_Get-InjectedThread
  PoC code from blog
  ☆16Updated 4 years ago
• ThunderGunExpress / CustomStager
  ☆16Updated 6 years ago
• NotoriousRebel / ConfigPersist
  Modifies machine.config for persistence after installing signed .net assembly onto GAC
  ☆11Updated 2 years ago
• sourcefrenchy / cryptopayload
  module for certexfil
  ☆15Updated 2 years ago
• rvrsh3ll / UACSilentCleanup
  ☆14Updated 5 years ago
• SecurityJosh / MuteSysmon
  A PowerShell script to prevent Sysmon from writing its events
  ☆14Updated 4 years ago
• NotMedic / SocksLauncher
  ☆14Updated 5 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 7 years ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• jaredhaight / ReflectCmd
  A simple reflective dll example
  ☆18Updated 8 years ago
• arunvnnk / AVbypass
  Techniques that i have used to evade anti-virus during pen tests.
  ☆13Updated 6 years ago
• OsandaMalith / VBShellCode
  Making shellcode UD - https://osandamalith.com
  ☆24Updated 8 years ago
• Powershell-Offense / Post-Exploitation
  \ PowerAvails Powershell /
  ☆12Updated 6 years ago
• cobbr / InsecurePowerShellHost
  InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…
  ☆30Updated 7 years ago
• tevora-threat / c2_reporter
  Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials
  ☆20Updated 4 years ago
• checkymander / TokenContextManipulation
  Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.
  ☆12Updated 6 years ago
• govolution / bfg
  ☆11Updated 5 years ago
• glinares / CSCGuard
  Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
  ☆25Updated 6 years ago