Alternatives and similar repositories for LethalHTA:

Users that are interested in LethalHTA are comparing it to the libraries listed below

• invokethreatguy / AggressorCollection
  Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors
  ☆152Updated 6 years ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆253Updated 6 years ago
• b4rtik / ATPMiniDump
  Evading WinDefender ATP credential-theft
  ☆254Updated 5 years ago
• RedSiege / AggressorAssessor
  Aggressor scripts for phases of a pen test or red team assessment
  ☆182Updated 7 months ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆270Updated 5 years ago
• 001SPARTaN / aggressor_scripts
  A collection of useful scripts for Cobalt Strike
  ☆166Updated 7 months ago
• decoder-it / powershellveryless
  Constrained Language Mode + AMSI bypass all in one
  ☆156Updated 5 years ago
• ryhanson / ExternalC2
  A library for integrating communication channels with the Cobalt Strike External C2 server
  ☆283Updated 7 years ago
• xorrior / raven
  CobaltStrike External C2 for Websockets
  ☆194Updated 5 years ago
• bohops / GhostBuild
  GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
  ☆248Updated 4 years ago
• rvrsh3ll / SharpCOM
  CSHARP DCOM Fun
  ☆127Updated 5 years ago
• rasta-mouse / Aggressor-Script
  Collection of Aggressor Scripts for Cobalt Strike
  ☆169Updated 6 years ago
• panagioto / SharpExchangePriv
  A C# implementation of PrivExchange by @_dirkjan.
  ☆158Updated 6 years ago
• nettitude / Invoke-PowerThIEf
  The PowerThIEf, an Internet Explorer Post Exploitation library
  ☆130Updated 3 weeks ago
• tevora-threat / PowerView3-Aggressor
  Cobalt Strike Aggressor script menu for Powerview/SharpView
  ☆130Updated 6 years ago
• vysecurity / Aggressor-VYSEC
  ☆207Updated 6 years ago
• vletoux / SpoolerScanner
  Check if MS-RPRN is remotely available with powershell/c#
  ☆173Updated 6 years ago
• anthemtotheego / SharpExec
  ☆350Updated 3 years ago
• khr0x40sh / WhiteListEvasion
  Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.
  ☆129Updated 9 years ago
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆323Updated 5 years ago
• Cybereason / Invoke-WMILM
  ☆229Updated 6 years ago
• bluscreenofjeff / MalleableC2Profiles
  Malleable C2 profiles for Cobalt Strike
  ☆70Updated 2 years ago
• b4rtik / SharpMiniDump
  Create a minidump of the LSASS process from memory
  ☆259Updated 2 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆145Updated 5 years ago
• taherio / redi
  Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)
  ☆142Updated 7 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆256Updated 6 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆167Updated 4 years ago
• karttoon / trigen
  Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
  ☆203Updated 7 years ago
• Und3rf10w / external_c2_framework
  Python api for usage with cobalt strike's External C2 specification
  ☆228Updated 2 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆124Updated 6 years ago