Alternatives and similar repositories for TokenStealer

Users that are interested in TokenStealer are comparing it to the libraries listed below

• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• brosck / Reaper
  「💀」Proof of concept on BYOVD attack
  ☆161Updated 7 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆147Updated last year
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆205Updated last year
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆132Updated 11 months ago
• SaadAhla / DocPlz
  Documents Exfiltration project for fun and educational purposes
  ☆145Updated last year
• g0h4n / REC2
  REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs…
  ☆157Updated last year
• dmcxblue / SharpBlackout
  Terminate AV/EDR leveraging BYOVD attack
  ☆88Updated 3 months ago
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆165Updated last year
• BlackSnufkin / GhostDriver
  yet another AV killer tool using BYOVD
  ☆292Updated last year
• florylsk / SignatureGate
  Weaponized HellsGate/SigFlip
  ☆199Updated 2 years ago
• byinarie / teams_dump
  PoC for dumping and decrypting cookies in the latest version of Microsoft Teams
  ☆132Updated last year
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆185Updated last year
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆139Updated 11 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆148Updated last year
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆59Updated 10 months ago
• lsecqt / ThreadlessInject-C-Implementation
  This repository implements Threadless Injection in C
  ☆169Updated last year
• Wh04m1001 / CVE-2024-20656
  ☆136Updated last year
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆126Updated 5 months ago
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆239Updated last year
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆191Updated last year
• smokeme / airstrike
  ☆167Updated 11 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆150Updated 9 months ago
• MzHmO / WhoIsWho
  Amazing whoami alternatives
  ☆140Updated last year
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆132Updated 8 months ago
• WKL-Sec / dcomhijack
  Lateral Movement Using DCOM and DLL Hijacking
  ☆297Updated 2 years ago
• WKL-Sec / WMIExec
  Set of python scripts which perform different ways of command execution via WMI protocol.
  ☆160Updated 2 years ago
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆119Updated last year
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆193Updated 2 years ago
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆255Updated 2 weeks ago