☆16Feb 27, 2026Updated 4 months ago
Alternatives and similar repositories for SharpUnderlayCopy
Users that are interested in SharpUnderlayCopy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- .NET assembly loader with patchless AMSI and ETW bypass in Rust☆60Oct 9, 2024Updated last year
- Cortex EDR Ransomware protection Bypass☆27Feb 8, 2025Updated last year
- Weaponized VSCode Extensions☆20May 7, 2026Updated 2 months ago
- Cobalt Strike BOF☆58Dec 10, 2025Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- custom bloodhound queries and knowledge base☆13Apr 16, 2024Updated 2 years ago
- LLM security assessment framework. Automated reconnaissance, fingerprinting, and attack simulation for AI/LLM endpoints. Discovers chat e…☆19Apr 8, 2026Updated 3 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 5 months ago
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated last month
- A tool that helps change the recovery configuration of a Windows service to make lateral movement more stealthy☆43Feb 8, 2026Updated 5 months ago
- SilentChrome-BOF is a BOF (Beacon Object File) that silently installs a browser extension into Chrome or Edge by modifying the Preference…☆30Apr 3, 2026Updated 3 months ago
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆83Apr 11, 2026Updated 3 months ago
- A collection of DPAPI hunting and parsing BOFs☆38Mar 3, 2026Updated 4 months ago
- Unique technique for bypassing AMSI☆18Dec 26, 2025Updated 6 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆166Oct 31, 2024Updated last year
- Sigma Queries turned into KQL for Defender using pysigma☆12Mar 29, 2026Updated 3 months ago
- Beacon Object File for LDAP Queries Through ADWS☆35Jun 12, 2026Updated last month
- Early Bird APC Injection in Rust☆65Oct 9, 2024Updated last year
- Proof-of-Concept tool to dump trusted domain objects☆44May 14, 2026Updated 2 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆21Jul 3, 2026Updated 2 weeks ago
- ☆39May 4, 2026Updated 2 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated last month
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆128Jan 24, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD d…☆55Jul 10, 2026Updated last week
- ☆192Oct 21, 2025Updated 8 months ago
- User-Defined C2 BOF Template☆33Nov 24, 2025Updated 7 months ago
- A QoL tool to obfuscate shellcode.☆26Jun 2, 2026Updated last month
- Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability☆24Feb 5, 2025Updated last year
- EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.☆193May 23, 2026Updated last month
- ☆17Jun 9, 2026Updated last month
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 8 months ago
- Azure apim mini proxy☆61May 18, 2026Updated 2 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆83Jun 30, 2026Updated 2 weeks ago
- Dump protected files (SAM,SYSTEM,SECURITY) by parsing the raw NTFS partition☆76Updated this week
- CVE 2025 27237 Zabbix LPE proof of concept.☆20Jan 26, 2026Updated 5 months ago
- ☆21Oct 15, 2024Updated last year
- Experimentations with the MSBuild Capabilites in a default environment.☆23Dec 6, 2025Updated 7 months ago
- Vulnerable kernel drivers to kill EDR☆18Aug 11, 2025Updated 11 months ago
- An Ansible collection that installs a SCOM deployment with optional configurations.☆24Dec 9, 2025Updated 7 months ago