☆219Apr 2, 2018Updated 8 years ago
Alternatives and similar repositories for ClrGuard
Users that are interested in ClrGuard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A set of demos and a PowerShell module to interact with DotNetInterop.☆69Apr 7, 2018Updated 8 years ago
- ☆852Jun 1, 2023Updated 3 years ago
- ☆52Sep 17, 2018Updated 8 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆288Aug 7, 2020Updated 6 years ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42May 9, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A library for integrating communication channels with the Cobalt Strike External C2 server☆290Nov 23, 2017Updated 8 years ago
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆102Nov 17, 2020Updated 5 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- A tool to create a JScript file which loads a .NET v2 assembly from memory.☆1,338Jan 18, 2021Updated 5 years ago
- Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive …☆915May 15, 2026Updated 5 months ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆868Jun 25, 2024Updated 2 years ago
- ☆233Sep 10, 2017Updated 9 years ago
- ☆229May 10, 2018Updated 8 years ago
- A repository of some of my Windows 10 Device Guard Bypasses☆139Aug 3, 2017Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆288Oct 31, 2018Updated 8 years ago
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆1,614Dec 10, 2018Updated 7 years ago
- ☆107Mar 21, 2017Updated 9 years ago
- A simple proof of concept for detecting use of Cobalt Strike's execute-assembly☆59Apr 1, 2022Updated 4 years ago
- Automated, Collection, and Enrichment Platform☆324Nov 14, 2019Updated 6 years ago
- C# Targeted Attack Reconnissance Tools☆120Jan 11, 2021Updated 5 years ago
- ☆108May 14, 2018Updated 8 years ago
- PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.☆36Sep 19, 2017Updated 9 years ago
- A PowerShell script to interact with the MITRE ATT&CK Framework via its own API☆367Feb 7, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- PowerShell Remote Download Cradle Generator & Obfuscator☆852Mar 23, 2018Updated 8 years ago
- ETW Python Library☆305Aug 11, 2023Updated 3 years ago
- Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode☆2,554Nov 15, 2023Updated 2 years ago
- C# Implementation of Jared Atkinson's Get-InjectedThread.ps1☆56Jul 11, 2021Updated 5 years ago
- SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API.☆109Jan 20, 2021Updated 5 years ago
- BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET☆147Feb 15, 2020Updated 6 years ago
- A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.☆100Jan 7, 2018Updated 8 years ago
- Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider☆213Dec 6, 2022Updated 3 years ago
- Also known by Microsoft as Knifecoat☆1,145Dec 22, 2022Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Use CLR to inject all the .NET apps☆183Apr 17, 2021Updated 5 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2…☆447Aug 7, 2020Updated 6 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- Token Privilege Research☆896Sep 1, 2017Updated 9 years ago
- Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)☆760Jan 28, 2019Updated 7 years ago