Alternatives and similar repositories for RunHijackHunter

Users that are interested in RunHijackHunter are comparing it to the libraries listed below

• deep-security / sysmon-config

  View on GitHub
  ☆13Jan 20, 2020Updated 6 years ago
• IceMoonHSV / Sim

  View on GitHub
  C# User Simulation
  ☆33Oct 6, 2022Updated 3 years ago
• jbaines-r7 / blankspace

  View on GitHub
  Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)
  ☆64Feb 14, 2022Updated 3 years ago
• darkoperator / SysmonLinux.Util

  View on GitHub
  PowerShell Module for parsing logs generated by Sysinternals Sysmon for Linux
  ☆37Mar 20, 2022Updated 3 years ago
• am0nsec / MCGC

  View on GitHub
  Minimalist Custom .NET Core Garbage Collector
  ☆23Jun 15, 2020Updated 5 years ago
• KINGSABRI / DotNetToJScriptMini

  View on GitHub
  A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.
  ☆46Mar 1, 2021Updated 4 years ago
• kyleavery / scarecrow_wrapper

  View on GitHub
  ☆39Jul 29, 2021Updated 4 years ago
• IonizeCbr / AmsiPatchDetection

  View on GitHub
  ☆21Jan 28, 2020Updated 6 years ago
• Orange-Cyberdefense / cme-wmi

  View on GitHub
  A standalone WMI protocol for CrackMapExec
  ☆51Feb 3, 2020Updated 6 years ago
• georgi-i / winevt_logs_analysis

  View on GitHub
  Searching .evtx logs for remote connections
  ☆24Jul 6, 2023Updated 2 years ago
• byt3bl33d3r / pyMalleableC2

  View on GitHub
  Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.
  ☆281Oct 29, 2024Updated last year
• X-C3LL / wfp-reader

  View on GitHub
  Proof of concept - Covert Channel using Windows Filtering Platform (C#)
  ☆21Aug 29, 2021Updated 4 years ago
• rgeoghan / app-password-persistence

  View on GitHub
  Using Microsoft 365 App Passwords for persistence
  ☆23Sep 2, 2020Updated 5 years ago
• magisterquis / pcapknock

  View on GitHub
  Watches for trigger packets, runs commands or spawns a shell
  ☆26May 29, 2019Updated 6 years ago
• nogginware / mstscdump

  View on GitHub
  MSTSC Packet Dump Utility
  ☆30Feb 11, 2022Updated 4 years ago
• evilashz / CheeseOunce

  View on GitHub
  Coerce Windows machines auth via MS-EVEN
  ☆171Jan 17, 2024Updated 2 years ago
• WingsOfDoom / ICU

  View on GitHub
  quick 'n dirty poc based on PoC windows auth prompt in c# based on https://gist.githubusercontent.com/mayuki/339952/raw/2c36b735bc51861a3…
  ☆31Jun 12, 2020Updated 5 years ago
• manyfacedllama / amsi-tracer

  View on GitHub
  Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …
  ☆111Apr 20, 2021Updated 4 years ago
• frkngksl / HintInject

  View on GitHub
  A PoC project for embedding shellcode to Hint/Name Table
  ☆113May 16, 2022Updated 3 years ago
• T3KX / Crackmapexec-LAPS

  View on GitHub
  LAPS module for CrackMapExec
  ☆29Oct 20, 2021Updated 4 years ago
• aaaddress1 / knownDlls_Poison

  View on GitHub
  ☆26Dec 29, 2021Updated 4 years ago
• andreiverse / WindowsPotatoes

  View on GitHub
  A list of windows potatoes!
  ☆26Mar 6, 2022Updated 3 years ago
• airbus-cyber / CyberSecRessources

  View on GitHub
  ☆25Sep 28, 2020Updated 5 years ago
• Ridter / CVE-2019-1040-dcpwn

  View on GitHub
  CVE-2019-1040 with Kerberos delegation
  ☆33Jun 18, 2021Updated 4 years ago
• ambray / ProcessHollowing

  View on GitHub
  Simple Process Hollowing in C#
  ☆68Oct 23, 2017Updated 8 years ago
• timwhitez / Doge-BlockDLLs

  View on GitHub
  Preventing 3rd Party DLLs from Injecting into your Malware
  ☆25Aug 31, 2021Updated 4 years ago
• tvgdb / cobaltstrike-cat-bof

  View on GitHub
  A Beacon Object File (BOF) implementation of the 'cat' command
  ☆25Feb 11, 2023Updated 3 years ago
• G0ldenGunSec / wmiServSessEnum

  View on GitHub
  .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems
  ☆36Dec 9, 2019Updated 6 years ago
• rvrsh3ll / RuralBishop

  View on GitHub
  D/Invoke port of UrbanBishop
  ☆30Dec 13, 2020Updated 5 years ago
• r4wd3r / RID-Hijacking

  View on GitHub
  Windows RID Hijacking persistence technique
  ☆178Nov 20, 2024Updated last year
• acmucsd / sdctf-2022

  View on GitHub
  The official challenges and deployment source code files used in San Diego CTF 2022.
  ☆28May 14, 2022Updated 3 years ago
• frkngksl / Celeborn

  View on GitHub
  Userland API Unhooker Project
  ☆110Jun 14, 2021Updated 4 years ago
• Immersive-Labs-Sec / CVE-2021-25281

  View on GitHub
  Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack
  ☆27Mar 6, 2021Updated 4 years ago
• xforcered / Dendrobate

  View on GitHub
  Managed code hooking template.
  ☆108Feb 15, 2021Updated 4 years ago
• hausec / COMMethodSearcher

  View on GitHub
  Script that searches through all COM objects for any methods containing a key word of your choosing.
  ☆74Feb 28, 2020Updated 5 years ago
• pkb1s / SharpRelay

  View on GitHub
  ☆180Feb 3, 2021Updated 5 years ago
• tomcarver16 / AmsiHook

  View on GitHub
  AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.
  ☆67Jun 14, 2020Updated 5 years ago
• D00MFist / PersistentJXA

  View on GitHub
  Collection of macOS persistence methods and miscellaneous tools in JXA
  ☆286Aug 3, 2023Updated 2 years ago
• newtonguass / ADPenLab

  View on GitHub
  ☆32Jun 10, 2020Updated 5 years ago