Alternatives and similar repositories for ColorDataProxyUACBypass

Users that are interested in ColorDataProxyUACBypass are comparing it to the libraries listed below

• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆144Updated 3 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆83Updated 3 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 3 years ago
• Henkru / cs-token-vault
  In-memory token vault BOF for Cobalt Strike
  ☆145Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆102Updated 3 years ago
• Kara-4search / HellgateLoader_CSharp
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆16Updated 3 years ago
• roberreigada / LsassUnhooker
  Little program written in C# to bypass EDR hooks and dump the content of the lsass process
  ☆61Updated 4 years ago
• Octoberfest7 / KillDefender
  A small (Edited) POC to make defender useless by removing its token privileges and lowering the token integrity
  ☆32Updated 3 years ago
• Hagrid29 / DuplicateDump
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆202Updated 3 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp
  Load shellcode via syscall
  ☆55Updated 4 years ago
• Octoberfest7 / EventViewerUAC_BOF
  Beacon Object File implementation of Event Viewer deserialization UAC bypass
  ☆131Updated 3 years ago
• Wh04m1001 / IFaultrepElevatedDataCollectionUAC
  ☆134Updated 2 years ago
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆99Updated 2 years ago
• EspressoCake / Self_Deletion_BOF
  BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs
  ☆185Updated 4 years ago
• Octoberfest7 / KDStab
  BOF combination of KillDefender and Backstab
  ☆170Updated 2 years ago
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆59Updated last year
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆84Updated 2 years ago
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆53Updated 2 years ago
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆150Updated 3 years ago
• kyxiaxiang / AV_EDR_EPP_Notes
  ☆58Updated last year
• trustedsec / PPLFaultDumpBOF
  ☆142Updated 2 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆140Updated 3 years ago
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆78Updated last year
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆108Updated last year
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆73Updated 3 years ago
• qwqdanchun / ScreenShot-BOF
  ☆41Updated 2 years ago
• evilashz / PigSyscall
  An implementation of an indirect system call
  ☆131Updated 2 years ago
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆46Updated 2 years ago
• netero1010 / TrustedPath-UACBypass-BOF
  Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…
  ☆142Updated 4 years ago
• Octoberfest7 / CVE-2023-36874_BOF
  Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
  ☆205Updated 2 years ago