Alternatives and similar repositories for PrivFu:

Users that are interested in PrivFu are comparing it to the libraries listed below

• antonioCoco / JuicyPotatoNG
  Another Windows Local Privilege Escalation from Service Account to System
  ☆851Updated 2 years ago
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,037Updated last year
• kyleavery / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆930Updated 11 months ago
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆915Updated last month
• ZeroMemoryEx / Terminator
  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
  ☆967Updated last year
• vu-ls / Crassus
  ☆571Updated last week
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,218Updated last year
• itm4n / PPLdump
  Dump the memory of a PPL with a userland exploit
  ☆870Updated 2 years ago
• boku7 / BokuLoader
  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
  ☆1,313Updated last year
• deepinstinct / Dirty-Vanity
  A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…
  ☆635Updated 2 years ago
• Wra7h / FlavorTown
  Various ways to execute shellcode
  ☆490Updated last year
• redteamsocietegenerale / DLLirant
  DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.
  ☆491Updated 2 years ago
• skahwah / SQLRecon
  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
  ☆722Updated 3 months ago
• p0dalirius / windows-coerced-authentication-methods
  A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) wit…
  ☆521Updated 3 months ago
• rasta-mouse / SharpC2
  Command and Control Framework written in C#
  ☆402Updated last year
• fortra / nanodump
  The swiss army knife of LSASS dumping
  ☆1,922Updated 7 months ago
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆915Updated 10 months ago
• PwnDexter / SharpEDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆707Updated last year
• Wh04m1001 / DFSCoerce
  ☆772Updated 2 years ago
• tastypepperoni / PPLBlade
  Protected Process Dumper Tool
  ☆545Updated last year
• eladshamir / Whisker
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆869Updated 5 months ago
• NUL0x4C / AtomPePacker
  A Highly capable Pe Packer
  ☆699Updated 2 years ago
• RedTeamOperations / Advanced-Process-Injection-Workshop
  ☆750Updated last year
• xforcered / Windows_LPE_AFD_CVE-2023-21768
  LPE exploit for CVE-2023-21768
  ☆419Updated 2 years ago
• SaadAhla / FilelessPELoader
  Loading Remote AES Encrypted PE in memory , Decrypted it and run it
  ☆932Updated last year
• klezVirus / SysWhispers3
  SysWhispers on Steroids - AV/EDR evasion via direct system calls.
  ☆1,421Updated 9 months ago
• CCob / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆711Updated 8 months ago
• Accenture / Codecepticon
  .NET/PowerShell/VBA Offensive Security Obfuscator
  ☆495Updated last year
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆675Updated last month
• CCob / SharpBlock
  A method of bypassing EDR's active projection DLL's by preventing entry point exection
  ☆1,142Updated 4 years ago