Alternatives and similar repositories for memexec:

Users that are interested in memexec are comparing it to the libraries listed below

• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆100Updated last year
• IncludeSecurity / c2-vulnerabilities
  PoCs of RCEs against open source C2 servers
  ☆80Updated 6 months ago
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆54Updated 7 months ago
• arget13 / memdlopen
  dlopen() filelessly a shared object or even a program (and run it).
  ☆54Updated last year
• synacktiv / bbs
  bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or ch…
  ☆86Updated 3 weeks ago
• eversinc33 / 1.6-C2
  Using the Counter Strike 1.6 RCON protocol as a C2 Channel.
  ☆75Updated last month
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆115Updated last year
• d0rb / CVE-2023-36874
  This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Wi…
  ☆77Updated last year
• FalconOpsLLC / udpz
  Speedy probe-based UDP service scanner
  ☆65Updated last month
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆108Updated 8 months ago
• MzHmO / articles
  ☆42Updated 3 weeks ago
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆135Updated last year
• ommadawn46 / win-x86-shellcoder
  A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)
  ☆56Updated 2 years ago
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆62Updated 3 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆171Updated 4 months ago
• xpn / ntlmquic
  POC tools for exploring SMB over QUIC protocol
  ☆121Updated 2 years ago
• ariary / DogWalk-rce-poc
  🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)
  ☆80Updated 2 years ago
• florylsk / SignatureGate
  Weaponized HellsGate/SigFlip
  ☆198Updated last year
• p0dalirius / FindProcessesWithNamedPipes
  A simple C++ Windows tool to get information about processes exposing named pipes.
  ☆36Updated 3 weeks ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆115Updated 4 months ago
• hideckies / malsrc
  A collection of malware techniques.
  ☆46Updated this week
• hrtywhy / BOF-CobaltStrike
  Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.
  ☆103Updated 2 years ago
• xpn / CloudInject
  ☆109Updated 4 months ago
• xct / rcat
  rcat
  ☆67Updated 3 years ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆80Updated 3 years ago
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆133Updated last week
• CodeXTF2 / cobaltstrike-headless
  Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.
  ☆147Updated 2 years ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆79Updated 5 months ago
• b4rth0v5k1 / Night_Walker
  ☆74Updated last year
• ChoiSG / OneDriveUpdaterSideloading
  Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post
  ☆91Updated 2 years ago