Alternatives and similar repositories for Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

Users that are interested in Remote-DLL-Injection-with-Timer-based-Shellcode-Execution are comparing it to the libraries listed below

• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆119Updated 3 months ago
• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆126Updated last year
• NtDallas / Svartalfheim
  Stage 0
  ☆164Updated 9 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆136Updated 3 weeks ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆189Updated 7 months ago
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆111Updated last week
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆122Updated 3 months ago
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆79Updated 7 months ago
• m8sec / Dispatch
  Evasive Payload Delivery Server & C2 Redirector
  ☆105Updated last month
• dmcxblue / WSL-Payloads
  A small How-To on creating your own weaponized WSL file
  ☆115Updated 2 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆120Updated 10 months ago
• rtecCyberSec / SpeechRuntimeMove
  Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking
  ☆131Updated 3 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆155Updated 2 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆147Updated 5 months ago
• paranoidninja / BRC4-BOF-Artillery
  ☆136Updated last month
• whokilleddb / hoontr
  A hoontr must hoont
  ☆96Updated last month
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS
  ☆149Updated 7 months ago
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆142Updated 6 months ago
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆116Updated last month
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated 6 months ago
• AlmondOffSec / DCOMRunAs
  Lateral movement with DCOM DLL hijacking
  ☆140Updated 3 months ago
• 0xv1n / RemoteSessionEnum
  Remotely Enumerate sessions using undocumented Windows Station APIs
  ☆119Updated last year
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆110Updated 3 months ago
• zarkones / BloodfangC2
  Modern PIC implant for Windows (64 & 32 bit)
  ☆104Updated 2 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆185Updated 10 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆98Updated 5 months ago
• S3N4T0R-0X0 / Hunter
  Охотник (Hunter) is a simple Adversary Simulation tool developed for achieves stealth through API unhooking, direct and indirect syscalls…
  ☆89Updated 5 months ago
• OleFredrik1 / remoteKrbRelayx
  A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
  ☆137Updated 2 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆158Updated 9 months ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆192Updated 10 months ago