Alternatives and similar repositories for SettingContent-MS-File-Execution

Users that are interested in SettingContent-MS-File-Execution are comparing it to the libraries listed below

• threatexpress / persistence-aggressor-script
  initial commit
  ☆44Updated 8 months ago
• vysecurity / Invoke-ProcessScan
  Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.
  ☆46Updated 8 years ago
• b4rtik / HiddenPowerShellDll
  ☆94Updated 6 years ago
• rvrsh3ll / Word-Doc-Video-Embed-EXE-POC
  ☆94Updated 6 years ago
• 0katz / CVE-2019-12476
  ☆44Updated 5 years ago
• 001SPARTaN / csfm
  Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
  ☆65Updated 7 years ago
• vysecurity / CobaltSplunk
  Splunk Dashboard for CobaltStrike logs
  ☆89Updated 4 years ago
• daddycocoaman / IronPentest
  Collection of IronPython scripts and executables for penetration testing
  ☆55Updated 6 years ago
• p292 / DDEAutoCS
  A cobaltstrike script that integrates DDEAuto Attacks
  ☆64Updated 7 years ago
• Truneski / external_c2_framework
  Python api for usage with cobalt strike's External C2 specification
  ☆62Updated 6 years ago
• 3gstudent / bitsadminexec
  Use bitsadmin to maintain persistence and bypass Autoruns
  ☆66Updated 8 years ago
• outflanknl / DoH_c2_Trigger
  Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/
  ☆52Updated 6 years ago
• homjxi0e / LOLBAS222
  APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )
  ☆109Updated 6 years ago
• rasta-mouse / CollectorService
  ☆54Updated 6 years ago
• johnjohnsp1 / AllTheThings
  Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.
  ☆32Updated 9 years ago
• 3gstudent / Office-Persistence
  Use powershell to test Office-based persistence methods
  ☆76Updated 4 years ago
• SpiderMate / Red-Teaming
  Ex-pv8's
  ☆64Updated 5 years ago
• trustedsec / auto_SettingContent-ms
  This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remo…
  ☆54Updated 7 years ago
• benyG / RProcDump
  Remote process dumping automation. Use it to dump Windows credentials remotely and extract clear text with Mimikatz offline
  ☆35Updated 5 years ago
• oldb00t / AggressorScripts
  Cobaltstrike Aggressor Scripts
  ☆28Updated 8 years ago
• redteam-cyberark / Google-Domain-fronting
  Domain fronting using Google app engine
  ☆52Updated 7 years ago
• homjxi0e / PowerAvails
  PowerAvails is a unit of collection of Powershell modules that help you get done many things
  ☆119Updated 6 years ago
• curtbraz / Invoke-NeutralizeAV
  Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
  ☆41Updated 6 years ago
• kmkz / Sources
  Random source codes
  ☆25Updated 5 years ago
• v1ado / HIPS_LIPS
  Community maintained list of most popular HIPS service and process names on a Windows Platform.
  ☆43Updated 3 years ago
• tasox / LogRM
  LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
  ☆74Updated 6 years ago
• kafkaesqu3 / subtee-gist-mirror
  few months old but better than nothing
  ☆58Updated 3 years ago
• vysecurity / Office365TenantsList
  Office365 Tenants List
  ☆16Updated 7 years ago
• stufus / parse-mimikatz-log
  A relatively flexible tool to parse mimikatz output
  ☆35Updated 8 years ago
• CyberPoint / LEAP
  ☆24Updated 9 years ago