☆16Aug 6, 2026Updated last month
Alternatives and similar repositories for SharpUnderlayCopy
Users that are interested in SharpUnderlayCopy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- .NET assembly loader with patchless AMSI and ETW bypass in Rust☆59Oct 9, 2024Updated last year
- Cortex EDR Ransomware protection Bypass☆27Feb 8, 2025Updated last year
- Weaponized VSCode Extensions☆21May 7, 2026Updated 4 months ago
- Cobalt Strike BOF☆58Dec 10, 2025Updated 9 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- custom bloodhound queries and knowledge base☆13Apr 16, 2024Updated 2 years ago
- LLM security assessment framework. Automated reconnaissance, fingerprinting, and attack simulation for AI/LLM endpoints. Discovers chat e…☆19Apr 8, 2026Updated 5 months ago
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated 3 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- A tool that helps change the recovery configuration of a Windows service to make lateral movement more stealthy☆44Feb 8, 2026Updated 7 months ago
- SilentChrome-BOF is a BOF (Beacon Object File) that silently installs a browser extension into Chrome or Edge by modifying the Preference…☆29Apr 3, 2026Updated 5 months ago
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 5 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 6 months ago
- Unique technique for bypassing AMSI☆18Dec 26, 2025Updated 8 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆167Oct 31, 2024Updated last year
- Sigma Queries turned into KQL for Defender using pysigma☆12Mar 29, 2026Updated 5 months ago
- Beacon Object File for LDAP Queries Through ADWS☆37Jun 12, 2026Updated 3 months ago
- Early Bird APC Injection in Rust☆66Oct 9, 2024Updated last year
- Proof-of-Concept tool to dump trusted domain objects☆47May 14, 2026Updated 4 months ago
- ☆39Sep 8, 2026Updated last week
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 2 months ago
- ☆39Mar 28, 2025Updated last year
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD d…☆55Jul 10, 2026Updated 2 months ago
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆127Jan 24, 2026Updated 7 months ago
- User-Defined C2 BOF Template☆32Nov 24, 2025Updated 9 months ago
- ☆193Oct 21, 2025Updated 10 months ago
- Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability☆24Feb 5, 2025Updated last year
- A QoL tool to obfuscate shellcode.☆28Jun 2, 2026Updated 3 months ago
- EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.☆193May 23, 2026Updated 3 months ago
- ☆17Jun 9, 2026Updated 3 months ago
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Azure apim mini proxy☆64Aug 10, 2026Updated last month
- Windows x64 Exploitation Training☆16May 30, 2025Updated last year
- Dump protected files (SAM,SYSTEM,SECURITY) by parsing the raw NTFS partition☆75Jul 18, 2026Updated 2 months ago
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆102Aug 6, 2026Updated last month
- CVE 2025 27237 Zabbix LPE proof of concept.☆19Jan 26, 2026Updated 7 months ago
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 9 months ago
- Vulnerable kernel drivers to kill EDR☆18Aug 11, 2025Updated last year