Alternatives and similar repositories for MCGC

Users that are interested in MCGC are comparing it to the libraries listed below

• djhohnstein / CSharpCreateThreadExample
  C# code to run PIC using CreateThread
  ☆17Updated 6 years ago
• rasta-mouse / AsyncNamedPipes
  Send and receive messages over Named Pipes asynchronously.
  ☆39Updated 3 years ago
• ThunderGunExpress / OutlookToolbox_v2
  ☆34Updated 7 years ago
• X-C3LL / wfp-reader
  Proof of concept - Covert Channel using Windows Filtering Platform (C#)
  ☆21Updated 3 years ago
• ThunderGunExpress / ThunderMSI
  ☆28Updated 7 years ago
• Soledge / BlockEtw
  .Net Assembly to block ETW telemetry in current process
  ☆79Updated 5 years ago
• checkymander / sshiva
  C# application that allows you to quick run SSH commands against a host or list of hosts
  ☆42Updated 4 years ago
• 0xthirteen / FileWriter
  .NET project for writing files to local or remote hosts
  ☆41Updated 5 years ago
• jnqpblc / Misc-PowerShell
  Miscellaneous PowerShell scripts for red team activities
  ☆16Updated 9 months ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• two06 / SharpShot
  Capture screenshots from .NET using .NET methods or Windows API calls
  ☆67Updated 5 years ago
• Apr4h / GetInjectedThreads
  C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
  ☆54Updated 4 years ago
• S3cur3Th1sSh1t / SharpByeBear
  AppXSVC Service race condition - privilege escalation
  ☆28Updated 6 years ago
• topotam / SharpWeb
  .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
  ☆21Updated 6 years ago
• perturbed-platypus / UEFIWriteCSharp
  ☆42Updated 5 years ago
• TheWover / AssemblyLoader
  Loads .NET Assembly Via CLR Loader
  ☆16Updated 6 years ago
• Meckazin / HidingFromETW
  PoC for detecting and evading ETW detection of .Net Assembly.Load
  ☆21Updated 4 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 3 years ago
• NotMedic / SocksLauncher
  ☆14Updated 5 years ago
• rvrsh3ll / FlaskRedirectorProtector
  Protect your servers with a secret header
  ☆29Updated 5 years ago
• D4rthMaulCop / DarthNetLoader
  ☆15Updated last year
• 001SPARTaN / FaceDancer
  Playing around with token manipulation in C#.
  ☆28Updated 5 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago
• 0xthirteen / CleanRunMRU
  Get or remove RunMRU values
  ☆57Updated 5 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆88Updated 2 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆69Updated 4 years ago
• perturbed-platypus / UEFIReadCSharp
  ☆33Updated 5 years ago
• rvrsh3ll / UACSilentCleanup
  ☆14Updated 5 years ago
• tevora-threat / c2_reporter
  Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials
  ☆20Updated 4 years ago