Alternatives and similar repositories for NoFilter

Users that are interested in NoFilter are comparing it to the libraries listed below

• mandiant / msi-search
  ☆290Updated 2 years ago
• trustedsec / specula
  ☆229Updated 7 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆216Updated last year
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆319Updated 2 years ago
• floesen / EventLogCrasher
  ☆192Updated last year
• Mr-Un1k0d3r / .NetConfigLoader
  .net config loader
  ☆348Updated 2 years ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆211Updated last year
• ZERODETECTION / MSC_Dropper
  ☆240Updated last year
• deepinstinct / Lsass-Shtinkering
  ☆385Updated 2 years ago
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆277Updated 10 months ago
• S3cur3Th1sSh1t / Ruy-Lopez
  ☆318Updated 2 years ago
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆234Updated last year
• synacktiv / ntdissector
  ☆164Updated 6 months ago
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆211Updated last year
• Octoberfest7 / DNS_Tunneling
  DNS Tunneling using powershell to download and execute a payload. Works in CLM.
  ☆231Updated 3 years ago
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆329Updated last year
• nettitude / Aladdin
  ☆223Updated 2 years ago
• mandiant / ccmpwn
  ☆215Updated last year
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆275Updated 6 months ago
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆205Updated 2 years ago
• cybersectroll / TrollAMSI
  ☆186Updated 6 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆269Updated last year
• tothi / serviceDetector
  Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…
  ☆239Updated 2 years ago
• MythicAgents / Athena
  ☆215Updated 2 months ago
• EvanMcBroom / lsa-whisperer
  Tools for interacting with authentication packages using their individual message protocols
  ☆365Updated last week
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆422Updated 6 months ago
• Kudaes / Split
  Apply a divide and conquer approach to bypass EDRs
  ☆288Updated 2 years ago
• logangoins / SharpSuccessor
  SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.
  ☆367Updated 3 months ago
• icyguider / LatLoader
  PoC module to demonstrate automated lateral movement with the Havoc C2 framework.
  ☆309Updated 2 years ago
• trustedsec / Titanis
  Windows protocol library, including SMB and RPC implementations, among others.
  ☆599Updated 2 months ago