Alternatives and similar repositories for changeling:

Users that are interested in changeling are comparing it to the libraries listed below

• djhohnstein / SharpSC
  Simple .NET assembly to interact with services.
  ☆38Updated 5 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• curi0usJack / ansible-redelk
  Ansible playbooks for instrumenting a Red Team environment with RedElk
  ☆47Updated 4 years ago
• ThunderGunExpress / Thunder_Woosus
  ☆38Updated 6 years ago
• checkymander / Forerunner
  Automation Engine using the Covenant API and lua scripting
  ☆24Updated 2 years ago
• kyleavery / Multi-Stage-Mythic
  ☆24Updated 3 years ago
• 0xS2V2 / marsform
  terraform deployment for red team
  ☆22Updated 2 years ago
• jfmaes / CSharpReflectionWorkshop
  The repository that complements the From zero to hero: creating a reflective loader in C# workshop
  ☆38Updated 3 years ago
• netbiosX / GhostLoader
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆52Updated 4 years ago
• kafkaesqu3 / SharpStomp
  Timestomping module: overwrite file create/modify times in .NET (no pinvoke)
  ☆24Updated 3 years ago
• FuzzySecurity / DotNetToJScript-LanguageModeBreakout
  ☆26Updated 6 years ago
• wavestone-cdt / Invoke-CleverSpray
  Password Spraying Script detecting current and previous passwords of Active Directory User
  ☆65Updated 3 years ago
• xan7r / Misc
  ☆45Updated 3 years ago
• dtrizna / DotNetInject
  Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.
  ☆37Updated 5 years ago
• morRubin / PrtToCert
  ☆19Updated 4 years ago
• leoloobeek / keyring
  Proper Payload Protection Prevents Poor Performance
  ☆73Updated 2 years ago
• djackreuter / taskmgr_hooking
  Dump LSASS process in Task Manager without triggering Defender.
  ☆18Updated last year
• blackarrowsec / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆17Updated 3 years ago
• ConstantinT / Lantern
  ☆20Updated 3 years ago
• yoda66 / MalwareDevTalk
  ☆47Updated 4 years ago
• Pascal-0x90 / sideloadr
  Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).
  ☆54Updated 2 years ago
• Mr-B0b / BloodCheck
  BloodCheck enables Red and Blue Teams to manage multiple Neo4j databases and run Cypher queries against a BloodHound dataset.
  ☆17Updated 3 years ago
• airman604 / schtask_now
  ☆17Updated 6 years ago
• dmchell / Sniper
  A simple proof of concept for detecting use of Cobalt Strike's execute-assembly
  ☆59Updated 2 years ago
• PorLaCola25 / TransactedSharpMiniDump
  Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…
  ☆70Updated 4 years ago
• RiccardoAncarani / bloodhound-playbook
  Reproducible and extensible BloodHound playbooks
  ☆42Updated 5 years ago
• asaurusrex / MachoBins
  ☆15Updated 2 years ago
• mdsecactivebreach / RegistryStrikesBack
  ☆52Updated 4 years ago
• EspressoCake / Process_Protection_Level_BOF
  ☆56Updated 3 years ago
• optiv / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆18Updated 3 years ago