Alternatives and similar repositories for NoFilter

Users that are interested in NoFilter are comparing it to the libraries listed below

• mandiant / msi-search
  ☆287Updated 2 years ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆213Updated 7 months ago
• trustedsec / specula
  ☆206Updated 2 months ago
• Mr-Un1k0d3r / .NetConfigLoader
  .net config loader
  ☆337Updated last year
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆316Updated last year
• synacktiv / ntdissector
  ☆155Updated 2 months ago
• deepinstinct / Lsass-Shtinkering
  ☆382Updated 2 years ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆205Updated last year
• EvanMcBroom / lsa-whisperer
  Tools for interacting with authentication packages using their individual message protocols
  ☆340Updated 2 weeks ago
• S3cur3Th1sSh1t / Ruy-Lopez
  ☆306Updated 2 years ago
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆328Updated last year
• floesen / EventLogCrasher
  ☆188Updated last year
• nettitude / Aladdin
  ☆222Updated last year
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆330Updated 2 months ago
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆207Updated last year
• mandiant / ccmpwn
  ☆212Updated last year
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆264Updated last month
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆265Updated 9 months ago
• RedSiege / jargon
  ☆148Updated 5 months ago
• ZERODETECTION / MSC_Dropper
  ☆194Updated last year
• akamai / BadSuccessor
  ☆193Updated 3 months ago
• cybersectroll / TrollAMSI
  ☆182Updated 2 months ago
• tothi / serviceDetector
  Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…
  ☆237Updated last year
• Kudaes / Split
  Apply a divide and conquer approach to bypass EDRs
  ☆281Updated last year
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆193Updated 2 years ago
• Octoberfest7 / DNS_Tunneling
  DNS Tunneling using powershell to download and execute a payload. Works in CLM.
  ☆229Updated 3 years ago
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆234Updated last year
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆370Updated 2 years ago
• icyguider / LatLoader
  PoC module to demonstrate automated lateral movement with the Havoc C2 framework.
  ☆304Updated last year
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆320Updated 9 months ago