Alternatives and similar repositories for revbshell

Users that are interested in revbshell are comparing it to the libraries listed below

• offsecginger / AES-PowerShellCode
  Standalone version of my AES Powershell payload for Cobalt Strike.
  ☆111Updated 5 years ago
• djhohnstein / ScatterBrain
  Suite of Shellcode Running Utilities
  ☆113Updated 5 years ago
• mdsecactivebreach / Browser-ExternalC2
  External C2 Using IE COM Objects
  ☆101Updated 6 years ago
• byt3bl33d3r / Naga
  A C# stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)
  ☆66Updated 5 years ago
• jfmaes / Backdoorplz
  adding a backdooruser using win32api
  ☆80Updated 5 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆70Updated 4 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆136Updated 4 years ago
• mdsecactivebreach / WMIPersistence
  WMI Event Subscription Persistence in C#
  ☆113Updated 6 years ago
• icebearfriend / Quickrundown
  Smart overlay for Cobalt Strike PS function
  ☆31Updated 6 years ago
• fozavci / petaqc2
  Petaq - Purple Team Command & Control Server
  ☆105Updated 2 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆77Updated 5 years ago
• djhohnstein / CSharpSetThreadContext
  C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread
  ☆119Updated 6 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 5 years ago
• djhohnstein / TSMSISrv_poc
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆61Updated 6 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆54Updated 6 years ago
• med0x2e / genxlm
  A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…
  ☆91Updated 5 years ago
• checkymander / CoreSploit
  Initial Commit of Coresploit
  ☆57Updated 3 years ago
• djhohnstein / KittyLitter
  Credential Dumper
  ☆78Updated 5 years ago
• med0x2e / RT-EWS
  A Powershell module including a couple of cmdlets for EWS Enum/Exploitation.
  ☆17Updated 6 years ago
• vivami / OutlookParasite
  Outlook persistence using VSTO add-ins
  ☆87Updated 4 years ago
• jfmaes / TrustJack
  Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows
  ☆143Updated 5 years ago
• rvrsh3ll / SharpExcel4-DCOM
  Port of Invoke-Excel4DCOM
  ☆104Updated 5 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆107Updated 4 years ago
• Mr-Un1k0d3r / RemoteProcessInjection
  C# remote process injection utility for Cobalt Strike
  ☆88Updated 5 years ago
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆26Updated 5 years ago
• bats3c / DefensiveInjector
  Shellcode injector using direct syscalls
  ☆123Updated 5 years ago
• xan7r / Misc
  ☆46Updated 4 years ago
• darkr4y / SharpOffensiveShell
  A sort of simple shell which support multiple protocols.
  ☆100Updated 6 years ago
• curi0usJack / rubeus2ccache
  Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.
  ☆67Updated 5 years ago
• rmdavy / AMSI_Ordinal_Bypass
  Bypass AMSI and Defender using Ordinal Values
  ☆42Updated 5 years ago