☆186Jun 14, 2025Updated last year
Alternatives and similar repositories for TrollAMSI
Users that are interested in TrollAMSI are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆141May 22, 2024Updated 2 years ago
- ☆83May 19, 2024Updated 2 years ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆217Oct 19, 2024Updated 2 years ago
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆750Aug 17, 2026Updated 2 months ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆611Aug 17, 2026Updated 2 months ago
- A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…☆600Jun 12, 2024Updated 2 years ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆211Jun 10, 2024Updated 2 years ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆813Jan 26, 2026Updated 9 months ago
- Ghosting-AMSI☆251Apr 24, 2025Updated last year
- ☆91May 15, 2024Updated 2 years ago
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- .NET assembly loader with patchless AMSI and ETW bypass☆392Apr 19, 2023Updated 3 years ago
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆270Apr 8, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆898Feb 3, 2024Updated 2 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year
- "AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS☆336Sep 30, 2025Updated last year
- Process injection alternative☆404Sep 6, 2024Updated 2 years ago
- A POC to disable TamperProtection and other Defender / MDE components☆261Jun 6, 2024Updated 2 years ago
- UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.☆53May 8, 2024Updated 2 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆650May 8, 2025Updated last year
- Collection of UAC Bypass Techniques Weaponized as BOFs☆664Feb 21, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆247May 5, 2024Updated 2 years ago
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆152Aug 15, 2024Updated 2 years ago
- A BloodHound collector for Microsoft Configuration Manager☆404Jul 7, 2025Updated last year
- BOF with Synthetic Stackframe☆274Oct 30, 2025Updated last year
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆427Oct 24, 2026Updated last week
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆176May 30, 2024Updated 2 years ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆211Aug 12, 2024Updated 2 years ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆468Jun 27, 2025Updated last year
- Lateral Movement Bof with MSI ODBC Driver Install☆174Sep 30, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Bypassing UAC with SSPI Datagram Contexts☆474Sep 24, 2023Updated 3 years ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆364Nov 19, 2024Updated last year
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆348Jul 10, 2026Updated 3 months ago
- Lateral movement with DCOM DLL hijacking☆185Jul 4, 2025Updated last year
- ☆141Nov 17, 2025Updated 11 months ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆250Jun 11, 2024Updated 2 years ago