Alternatives and similar repositories for NoFilter

Users that are interested in NoFilter are comparing it to the libraries listed below

• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆317Updated 2 years ago
• Mr-Un1k0d3r / .NetConfigLoader
  .net config loader
  ☆344Updated last year
• mandiant / msi-search
  ☆287Updated 2 years ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆213Updated 8 months ago
• synacktiv / ntdissector
  ☆160Updated 3 months ago
• trustedsec / specula
  ☆212Updated 3 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆209Updated last year
• deepinstinct / Lsass-Shtinkering
  ☆382Updated 2 years ago
• floesen / EventLogCrasher
  ☆189Updated last year
• EvanMcBroom / lsa-whisperer
  Tools for interacting with authentication packages using their individual message protocols
  ☆339Updated last month
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆353Updated 3 months ago
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆208Updated last year
• S3cur3Th1sSh1t / Ruy-Lopez
  ☆310Updated 2 years ago
• trustedsec / Titanis
  Windows protocol library, including SMB and RPC implementations, among others.
  ☆344Updated last week
• nettitude / Aladdin
  ☆222Updated last year
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆196Updated 2 years ago
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆328Updated last year
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆266Updated 7 months ago
• cybersectroll / TrollAMSI
  ☆182Updated 3 months ago
• Octoberfest7 / DNS_Tunneling
  DNS Tunneling using powershell to download and execute a payload. Works in CLM.
  ☆228Updated 3 years ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆374Updated 2 years ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆362Updated last year
• ZERODETECTION / MSC_Dropper
  ☆203Updated last year
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆265Updated 10 months ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆267Updated 3 months ago
• RedSiege / jargon
  ☆152Updated 6 months ago
• mandiant / ccmpwn
  ☆213Updated last year
• tothi / serviceDetector
  Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…
  ☆237Updated 2 years ago
• RedefiningReality / Cobalt-Strike
  Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
  ☆313Updated last year
• Tylous / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆124Updated 2 years ago