Alternatives and similar repositories for NoFilter

Users that are interested in NoFilter are comparing it to the libraries listed below

• mandiant / msi-search
  ☆277Updated last year
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆359Updated last year
• deepinstinct / Lsass-Shtinkering
  ☆378Updated 2 years ago
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆311Updated last year
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆206Updated 4 months ago
• RedefiningReality / Cobalt-Strike
  Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
  ☆292Updated last year
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆336Updated last year
• trustedsec / specula
  ☆191Updated 8 months ago
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆306Updated 6 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆200Updated 11 months ago
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆253Updated 3 months ago
• MzHmO / PowershellKerberos
  Some scripts to abuse kerberos using Powershell
  ☆340Updated last year
• ly4k / PassTheChallenge
  Recovering NTLM hashes from Credential Guard
  ☆339Updated 2 years ago
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆200Updated 3 months ago
• xforcered / BokuLoader
  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
  ☆330Updated 10 months ago
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆324Updated 10 months ago
• Mr-Un1k0d3r / .NetConfigLoader
  .net config loader
  ☆328Updated last year
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆190Updated last year
• RalfHacker / Kerbeus-BOF
  BOF for Kerberos abuse (an implementation of some important features of the Rubeus).
  ☆468Updated 2 months ago
• mandiant / ccmpwn
  ☆203Updated last year
• floesen / EventLogCrasher
  ☆188Updated last year
• nettitude / Aladdin
  ☆221Updated last year
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆256Updated 2 years ago
• synacktiv / ntdissector
  ☆141Updated 9 months ago
• RedSiege / jargon
  ☆144Updated 2 months ago
• ACE-Responder / RogueSliver
  A suite of tools to disrupt campaigns using the Sliver C2 framework.
  ☆276Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆235Updated last year
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆214Updated last week
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆223Updated last month
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆184Updated last year