Alternatives and similar repositories for EventLogCrasher:

Users that are interested in EventLogCrasher are comparing it to the libraries listed below

• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆193Updated 7 months ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆182Updated last year
• mandiant / msi-search
  ☆269Updated last year
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 6 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆236Updated 2 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆143Updated 8 months ago
• cybersectroll / TrollAMSI
  ☆161Updated 2 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆172Updated 2 weeks ago
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆180Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆233Updated last year
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆306Updated last year
• trustedsec / specula
  ☆184Updated 4 months ago
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆216Updated last month
• deepinstinct / DCOMUploadExec
  DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
  ☆330Updated last month
• NtDallas / Svartalfheim
  Stage 0
  ☆148Updated last month
• rad9800 / FileRenameJunctionsEDRDisable
  ☆137Updated last month
• Tylous / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆174Updated 4 months ago
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆159Updated last month
• deepinstinct / NoFilter
  ☆296Updated 3 months ago
• CCob / Shwmae
  ☆139Updated this week
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆153Updated last month
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆169Updated 2 months ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆335Updated last year
• BlackSnufkin / Invoke-DumpMDEConfig
  PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges requir…
  ☆140Updated 7 months ago
• RedSiege / Jigsaw
  Hide shellcode by shuffling bytes into a random array and reconstruct at runtime
  ☆185Updated 7 months ago
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆224Updated this week
• ZERODETECTION / MSC_Dropper
  ☆137Updated 6 months ago
• ricardojoserf / WhoamiAlternatives
  Different methods to get current username without using whoami
  ☆173Updated 11 months ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆149Updated 8 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆171Updated 2 weeks ago