Alternatives and similar repositories for NoFilter

Users that are interested in NoFilter are comparing it to the libraries listed below

• mandiant / msi-search
  ☆287Updated 2 years ago
• Mr-Un1k0d3r / .NetConfigLoader
  .net config loader
  ☆339Updated last year
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆317Updated 2 years ago
• trustedsec / specula
  ☆211Updated 3 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆213Updated 8 months ago
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆342Updated 2 months ago
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆329Updated last year
• deepinstinct / Lsass-Shtinkering
  ☆382Updated 2 years ago
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆208Updated last year
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆207Updated last year
• S3cur3Th1sSh1t / Ruy-Lopez
  ☆310Updated 2 years ago
• floesen / EventLogCrasher
  ☆188Updated last year
• RedSiege / jargon
  ☆152Updated 5 months ago
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆267Updated 6 months ago
• RedSiege / Jigsaw
  Hide shellcode by shuffling bytes into a random array and reconstruct at runtime
  ☆199Updated 5 months ago
• synacktiv / ntdissector
  ☆159Updated 2 months ago
• tothi / serviceDetector
  Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…
  ☆237Updated 2 years ago
• cybersectroll / TrollAMSI
  ☆182Updated 3 months ago
• RedefiningReality / Cobalt-Strike
  Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
  ☆309Updated last year
• nettitude / Aladdin
  ☆222Updated last year
• mandiant / ccmpwn
  ☆212Updated last year
• ZERODETECTION / MSC_Dropper
  ☆200Updated last year
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆194Updated 2 years ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆373Updated 2 years ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆265Updated 2 months ago
• MaLDAPtive / Invoke-Maldaptive
  MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
  ☆307Updated last year
• Kudaes / Split
  Apply a divide and conquer approach to bypass EDRs
  ☆287Updated last year
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆265Updated 10 months ago
• synacktiv / SCCMSecrets
  SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
  ☆241Updated last week
• ph4nt0mbyt3 / Darkside
  C# AV/EDR Killer using less-known driver (BYOVD)
  ☆180Updated last year