Alternatives and similar repositories for superman:

Users that are interested in superman are comparing it to the libraries listed below

• optiv / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆716Updated last year
• colind0pe / AV-Bypass-Learning
  免杀学习笔记
  ☆221Updated last year
• kyxiaxiang / Beacon_Source
  not a reverse-engineered version of the Cobalt Strike Beacon
  ☆355Updated last year
• b1nhack / rust-shellcode
  windows-rs shellcode loaders
  ☆350Updated 9 months ago
• MaorSabag / TrueSightKiller
  CPP AV/EDR Killer
  ☆403Updated last year
• ReversingID / Shellcode-Loader
  Open repository for learning dynamic shellcode loading (sample in many programming languages)
  ☆243Updated 2 months ago
• WKL-Sec / HiddenDesktop
  HVNC for Cobalt Strike
  ☆1,210Updated last year
• HackerCalico / No_X_BOF
  Loading BOF & ShellCode without executable permission memory.
  ☆429Updated 5 months ago
• XiaoliChan / wmiexec-Pro
  New generation of wmiexec.py
  ☆1,065Updated 4 months ago
• Adaptix-Framework / AdaptixC2
  ☆507Updated this week
• pumpbin / pumpbin
  🎃 PumpBin is an Implant Generation Platform.
  ☆306Updated 9 months ago
• ZeroMemoryEx / Blackout
  kill anti-malware protected processes ( BYOVD) ( Microsoft Won)
  ☆935Updated last year
• hakaioffsec / CVE-2024-21338
  Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
  ☆291Updated last year
• BeichenDream / SharpToken
  Windows Token Stealing Expert
  ☆467Updated last year
• wgpsec / CreateHiddenAccount
  A tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具
  ☆467Updated 2 years ago
• HackerCalico / Magic_C2
  Red Team C2 Framework with AV/EDR bypass capabilities.
  ☆386Updated this week
• postrequest / link
  link is a command and control framework written in rust
  ☆575Updated 3 years ago
• D3Ext / Hooka
  Shellcode loader generator with multiples features
  ☆475Updated 3 months ago
• tykawaii98 / CVE-2024-30088
  ☆248Updated 8 months ago
• FDlucifer / Proxy-Attackchain
  Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)
  ☆525Updated last year
• varwara / CVE-2024-35250
  PoC for the Untrusted Pointer Dereference in the ks.sys driver
  ☆278Updated 4 months ago
• BeichenDream / PrintNotifyPotato
  PrintNotifyPotato
  ☆517Updated 2 years ago
• EvilBytecode / EDR-XDR-AV-Killer
  Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver
  ☆267Updated 3 weeks ago
• yj94 / BinarySpy
  一个手动或自动patch shellcode到二进制文件的免杀工具/A tool for manual or automatic patch shellcode into binary file oder to bypass AV.
  ☆472Updated 7 months ago
• wh0amitz / PetitPotato
  Local privilege escalation via PetitPotam (Abusing impersonate privileges).
  ☆429Updated 2 years ago
• wh0amitz / KRBUACBypass
  UAC Bypass By Abusing Kerberos Tickets
  ☆496Updated last year
• f1zm0 / hades
  Go shellcode loader that combines multiple evasion techniques
  ☆363Updated last year
• CodeXTF2 / ScreenshotBOF
  An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memor…
  ☆409Updated last week
• CrossC2 / CrossC2Kit
  CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some inte…
  ☆218Updated last year
• lypd0 / DeadPotato
  DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYS…
  ☆381Updated 8 months ago