Alternatives and similar repositories for ColorDataProxyUACBypass

Users that are interested in ColorDataProxyUACBypass are comparing it to the libraries listed below

• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆144Updated 3 years ago
• Kara-4search / HellgateLoader_CSharp
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆16Updated 3 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆83Updated 3 years ago
• roberreigada / LsassUnhooker
  Little program written in C# to bypass EDR hooks and dump the content of the lsass process
  ☆61Updated 4 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp
  Load shellcode via syscall
  ☆55Updated 4 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 3 years ago
• Octoberfest7 / EventViewerUAC_BOF
  Beacon Object File implementation of Event Viewer deserialization UAC bypass
  ☆132Updated 3 years ago
• Henkru / cs-token-vault
  In-memory token vault BOF for Cobalt Strike
  ☆145Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆102Updated 3 years ago
• EspressoCake / Self_Deletion_BOF
  BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs
  ☆187Updated 4 years ago
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆78Updated last year
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆101Updated 2 years ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆100Updated 3 years ago
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆84Updated 2 years ago
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆108Updated last year
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆59Updated last year
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆73Updated 3 years ago
• Wh04m1001 / IFaultrepElevatedDataCollectionUAC
  ☆133Updated 3 years ago
• bestspear / ReBeacon_ForClang
  Beacon compiled using clang
  ☆72Updated 2 years ago
• qwqdanchun / ScreenShot-BOF
  ☆41Updated 2 years ago
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆84Updated 2 years ago
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆68Updated 3 years ago
• Hagrid29 / DuplicateDump
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆202Updated 3 years ago
• kyxiaxiang / AV_EDR_EPP_Notes
  ☆58Updated last year
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆44Updated 3 years ago
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆150Updated 4 years ago
• Octoberfest7 / KillDefender
  A small (Edited) POC to make defender useless by removing its token privileges and lowering the token integrity
  ☆32Updated 3 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆139Updated 3 years ago
• trustedsec / PPLFaultDumpBOF
  ☆143Updated 2 years ago
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆121Updated 3 years ago