Alternatives and similar repositories for rifiuti2:

Users that are interested in rifiuti2 are comparing it to the libraries listed below

• 3gstudent / Eventlogedit-evtx--Evolution
  Remove individual lines from Windows XML Event Log (EVTX) files
  ☆267Updated 4 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆221Updated 4 years ago
• quarkslab / quarkspwdump
  Dump various types of Windows credentials without injecting in any process.
  ☆427Updated 2 years ago
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆338Updated 11 months ago
• silascutler / LnkParse
  Windows Shortcut file (LNK) parser
  ☆134Updated 2 years ago
• jschicht / UsnJrnl2Csv
  Parser for $UsnJrnl on NTFS
  ☆110Updated 2 years ago
• williballenthin / shellbags
  Cross-platform, open-source shellbag parser
  ☆150Updated 2 years ago
• yanncam / exe2powershell
  exe2powershell - exe2bat reborn for modern Windows
  ☆172Updated 4 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆257Updated 6 years ago
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆285Updated 5 years ago
• csababarta / ntdsxtract
  Active Directory forensic framework
  ☆323Updated 3 years ago
• mattifestation / WMI_Backdoor
  A PoC WMI backdoor presented at Black Hat 2015
  ☆273Updated 9 years ago
• trustedsec / tscopy
  ☆90Updated 2 years ago
• cyberark / ketshash
  A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
  ☆170Updated 2 months ago
• kavika13 / RemCom
  Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
  ☆346Updated 7 years ago
• fox-it / danderspritz-evtx
  Parse evtx files and detect use of the DanderSpritz eventlogedit module
  ☆148Updated 7 years ago
• returnvar / wce
  Windows Credentials Editor v1.3beta
  ☆109Updated 5 years ago
• decalage2 / oledump-contrib
  The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
  ☆52Updated 8 years ago
• sailay1996 / UAC_bypass_windows_store
  Windows 10 LPE (UAC Bypass) in Windows Store (WSReset.exe)
  ☆264Updated 5 years ago
• praetorian-inc / vulcan
  a tool to make it easy and fast to test various forms of injection
  ☆173Updated 5 years ago
• Viralmaniar / HiveJack
  This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to …
  ☆108Updated 5 years ago
• mubix / netview
  Netview enumerates systems using WinAPI calls
  ☆295Updated 3 years ago
• misterch0c / APT34
  APT34/OILRIG leak
  ☆231Updated 6 years ago
• r4wd3r / RID-Hijacking
  Windows RID Hijacking persistence technique
  ☆174Updated 5 months ago
• netbiosX / Digital-Signature-Hijack
  Binaries, PowerShell scripts and information about Digital Signature Hijacking.
  ☆215Updated 7 years ago
• enigma0x3 / Powershell-Payload-Excel-Delivery
  Uses Invoke-Shellcode to execute a payload and persist on the system.
  ☆113Updated 8 years ago
• dfirfpi / dpapilab
  Windows DPAPI laboratory
  ☆91Updated 7 years ago
• p0w3rsh3ll / AutoRuns
  🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitima…
  ☆270Updated 3 months ago
• nullbind / Other-Projects
  This project is just a dumping ground for random scripts I've developed.
  ☆139Updated 8 months ago
• pwndizzle / CodeExecutionOnWindows
  A list of ways to execute code on Windows using legitimate Windows tools
  ☆307Updated 5 years ago