Alternatives and similar repositories for x64win-AddRdpAdminShellcode:

Users that are interested in x64win-AddRdpAdminShellcode are comparing it to the libraries listed below

• tomcarver16 / SimpleInjector
  A simple injector that uses LoadLibraryA
  ☆17Updated 4 years ago
• pwn1sher / RTImplant
  Just another casual shellcode native loader
  ☆24Updated 3 years ago
• jfmaes / SharpXOR
  XOR crypt/decrypt using C#
  ☆12Updated 4 years ago
• GetRektBoy724 / JALSI
  JALSI - Just Another Lame Shellcode Injector
  ☆30Updated 3 years ago
• plackyhacker / PowerGhost
  A custom run space to bypass AMSI and Constrained Language mode in PowerShell.
  ☆18Updated last year
• fozavci / ransoblin
  Ransoblin (Ransomware Bokoblin)
  ☆17Updated 4 years ago
• OccamsXor / sim-ba
  (Sim)ulate (Ba)zar Loader
  ☆29Updated 4 years ago
• m8sec / EAPrimer
  C# project to Reflectively load .Net assemblies in memory
  ☆17Updated 9 months ago
• GetRektBoy724 / Breaking-Detecting-Direct-Syscall-Techniques
  A repository filled with ideas to break/detect direct syscall techniques
  ☆27Updated 2 years ago
• klezVirus / LoGiC.NET
  A more advanced free and open .NET obfuscator using dnlib.
  ☆10Updated 2 years ago
• Adepts-Of-0xCC / SnoopyOwl
  ☆48Updated 3 years ago
• plackyhacker / AMSI-Bypass
  Another AMSI bypass - but in C++.
  ☆23Updated last year
• GeorgePatsias / PayloadFactory
  C# implementation of Shellcode delivery techniques using PInvoke and DInvoke variations for API calling.
  ☆35Updated 3 years ago
• mgeeky / EvilClippy
  A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro…
  ☆23Updated 2 years ago
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆32Updated 2 years ago
• mobdk / Sigma
  Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx
  ☆14Updated 3 years ago
• reznok / MemoryLoader
  A .NET binary loader that bypasses AMSI
  ☆44Updated 3 years ago
• thesnoom / extps-cobalt-strike-bof
  Extended Process List (Search functionality)
  ☆29Updated 4 years ago
• sailay1996 / FileWrite2system
  File Write Weapon for Privilege Escalation To get SYSTEM
  ☆17Updated 4 years ago
• Mantraufo / KanonSys
  Bypass Windows defender syscall
  ☆18Updated 3 years ago
• PorLaCola25 / NtCreateUserProcess
  ☆12Updated 4 years ago
• SolomonSklash / SeasideBishop
  A C port of b33f's UrbanBishop
  ☆38Updated 4 years ago
• fullmetalcache / CsharpMMNiceness
  Files for generating a C# source file that allows for memory-mapping "niceness" and then executing said "niceness"
  ☆31Updated 6 years ago
• GetRektBoy724 / SysGate
  One gate to all syscalls!
  ☆23Updated 3 years ago
• dosxuz / ProcessGhosting
  Small POC for process ghosting
  ☆39Updated 3 years ago
• fashionproof / CheckSafeBoot
  I used this to see if an EDR is running in Safe Mode
  ☆35Updated 4 years ago
• 0xthirteen / CleanRunMRU
  Get or remove RunMRU values
  ☆54Updated 5 years ago
• Allevon412 / BreadBear
  A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/
  ☆31Updated last year
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆26Updated 4 years ago
• mgeeky / unhook-bof
  Remove API hooks from a Beacon process.
  ☆13Updated 3 years ago