Alternatives and similar repositories for RedPeanut

Users that are interested in RedPeanut are comparing it to the libraries listed below

• anthemtotheego / SharpExec
  ☆354Updated 3 years ago
• anthemtotheego / SharpCradle
  ☆281Updated 5 years ago
• Kudaes / LOLBITS
  ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …
  ☆217Updated 3 years ago
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆328Updated 6 years ago
• outflanknl / SharpHide
  Tool to create hidden registry keys.
  ☆492Updated 6 years ago
• xorrior / Random-CSharpTools
  Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
  ☆233Updated 6 years ago
• DamonMohammadbagher / eBook-BypassingAVsByCSharp
  eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)
  ☆465Updated 2 years ago
• n1xbyte / donutCS
  dem sharp donuts
  ☆201Updated 3 years ago
• b4rtik / metasploit-execute-assembly
  Custom Metasploit post module to executing a .NET Assembly from Meterpreter session
  ☆348Updated 5 years ago
• Ziconius / FudgeC2
  FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
  ☆254Updated 2 years ago
• SpiderLabs / SharpCompile
  SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…
  ☆291Updated 5 years ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆254Updated 7 years ago
• byt3bl33d3r / OffensiveDLR
  Toolbox containing research notes & PoC code for weaponizing .NET's DLR
  ☆525Updated 3 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆235Updated 3 years ago
• christophetd / spoofing-office-macro
  PoC of a VBA macro spawning a process with a spoofed parent and command line.
  ☆381Updated 5 years ago
• hoangprod / AndrewSpecial
  AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
  ☆390Updated 6 years ago
• Cn33liz / MSBuildShell
  MSBuildShell, a Powershell Host running within MSBuild.exe
  ☆294Updated 6 years ago
• ryhanson / ExternalC2
  A library for integrating communication channels with the Cobalt Strike External C2 server
  ☆289Updated 8 years ago
• outflanknl / Ps-Tools
  Ps-Tools, an advanced process monitoring toolkit for offensive operations
  ☆356Updated 5 years ago
• bohops / GhostBuild
  GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
  ☆251Updated 5 years ago
• Mr-Un1k0d3r / MaliciousClickOnceGenerator
  Quick Malicious ClickOnceGenerator for Red Team
  ☆271Updated 4 years ago
• Arno0x / CSharpScripts
  Collection of C# scripts
  ☆341Updated 8 years ago
• ustayready / SharpHose
  Asynchronous Password Spraying Tool in C# for Windows Environments
  ☆318Updated 2 years ago
• rasta-mouse / TikiTorch
  Process Injection
  ☆764Updated 4 years ago
• hlldz / pickl3
  Windows active user credential phishing tool
  ☆283Updated 5 years ago
• threatexpress / metatwin
  The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…
  ☆359Updated last year
• FSecureLABS / Ninjasploit
  A meterpreter extension for applying hooks to avoid windows defender memory scans
  ☆249Updated 5 years ago
• rasta-mouse / MiscTools
  Miscellaneous Tools
  ☆269Updated 5 years ago
• ionescu007 / faxhell
  A Bind Shell Using the Fax Service and a DLL Hijack
  ☆331Updated 5 years ago
• dcsync / pycobalt
  Cobalt Strike Python API
  ☆305Updated 3 years ago