Alternatives and similar repositories for ColorDataProxyUACBypass

Users that are interested in ColorDataProxyUACBypass are comparing it to the libraries listed below

• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆142Updated 3 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 2 years ago
• Octoberfest7 / EventViewerUAC_BOF
  Beacon Object File implementation of Event Viewer deserialization UAC bypass
  ☆131Updated 3 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆83Updated 3 years ago
• Kara-4search / HellgateLoader_CSharp
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆16Updated 3 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp
  Load shellcode via syscall
  ☆55Updated 4 years ago
• roberreigada / LsassUnhooker
  Little program written in C# to bypass EDR hooks and dump the content of the lsass process
  ☆61Updated 4 years ago
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆76Updated 2 years ago
• EspressoCake / Self_Deletion_BOF
  BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs
  ☆184Updated 3 years ago
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆84Updated 2 years ago
• Henkru / cs-token-vault
  In-memory token vault BOF for Cobalt Strike
  ☆145Updated 3 years ago
• Octoberfest7 / KillDefender
  A small (Edited) POC to make defender useless by removing its token privileges and lowering the token integrity
  ☆32Updated 3 years ago
• Hagrid29 / DuplicateDump
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆201Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆102Updated 3 years ago
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆68Updated 3 years ago
• Wh04m1001 / IFaultrepElevatedDataCollectionUAC
  ☆134Updated 2 years ago
• trustedsec / PPLFaultDumpBOF
  ☆142Updated 2 years ago
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆77Updated last year
• qwqdanchun / ScreenShot-BOF
  ☆42Updated 2 years ago
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆150Updated 3 years ago
• netero1010 / TrustedPath-UACBypass-BOF
  Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…
  ☆140Updated 4 years ago
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆58Updated last year
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆108Updated last year
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆45Updated 3 years ago
• bestspear / ReBeacon_ForClang
  Beacon compiled using clang
  ☆72Updated 2 years ago
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆120Updated 3 years ago
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆99Updated 2 years ago
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆75Updated 2 years ago
• HuskyHacks / CobaltNotion
  A spin-off research project. Cobalt Strike x Notion collab 2022
  ☆53Updated 3 years ago
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago