Alternatives and similar repositories for Mockingjay

Users that are interested in Mockingjay are comparing it to the libraries listed below

• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆82Updated 10 months ago
• m8sec / Dispatch
  Evasive Payload Delivery Server & C2 Redirector
  ☆101Updated last month
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆136Updated last week
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆66Updated last year
• racoten / BetterNetLoader
  A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints
  ☆114Updated 2 months ago
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆93Updated 2 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆119Updated 9 months ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆192Updated 9 months ago
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆81Updated 2 years ago
• rasta-mouse / SpawnWith
  ☆109Updated 7 months ago
• Octoberfest7 / enumhandles_BOF
  ☆124Updated last year
• 0xJs / BYOVD_read_write_primitive
  Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
  ☆176Updated last month
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆80Updated 5 months ago
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆67Updated last year
• RWXstoned / LdrShuffle
  Code execution/injection technique using DLL PEB module structure manipulation
  ☆176Updated 3 months ago
• alexlee820 / PatchedCLRLoader
  .NET assembly loader with patching AMSI and ETW bypass
  ☆31Updated 5 months ago
• securifybv / BOFRyptor
  ☆123Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆157Updated 9 months ago
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆119Updated last year
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆98Updated 2 years ago
• nettitude / Tartarus-TpAllocInject
  ☆193Updated last year
• Sh3lldon / HellsVectoredGate
  ☆50Updated 2 months ago
• rtecCyberSec / SpeechRuntimeMove
  Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking
  ☆129Updated 2 months ago
• decoder-it / ChgPass
  ☆135Updated 7 months ago
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆114Updated last month
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆98Updated 4 months ago
• 0prrr / Malwear-Sweet
  Malware?
  ☆74Updated 11 months ago
• almounah / go-buena-clr
  Good CLR Host with Native patchless AMSI Bypass
  ☆89Updated 5 months ago
• paranoidninja / BRC4-BOF-Artillery
  ☆134Updated 2 weeks ago
• vulnableone / BypassX
  The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.
  ☆27Updated last year