Alternatives and similar repositories for CobaltStrikeDetect

Users that are interested in CobaltStrikeDetect are comparing it to the libraries listed below

• WBGlIl / ReflectiveDLL_Patch
  ☆37Updated 5 years ago
• NoOne-hub / bypass-BeaconEye
  bypass BeaconEye
  ☆88Updated 3 years ago
• OneSourceCat / creddump
  creddump bypass AV
  ☆42Updated 4 years ago
• Ghost2097221 / selfMimikatz
  自不量力的mimikatz分离计划
  ☆44Updated 3 years ago
• scareing / UAC_wenpon
  UAC_wenpon
  ☆48Updated 3 years ago
• verctor / Cobalt_Homework
  分析cobaltstrike c2 协议
  ☆68Updated 5 years ago
• crisprss / goHashDumper
  用于Dump指定进程的内存,主要利用静默退出机制(SilentProcessExit)和Windows API(MiniDumpW)实现
  ☆25Updated 3 years ago
• dust-life / run_pe
  ☆49Updated 3 years ago
• WBGlIl / Beacon_re
  ☆89Updated 2 years ago
• knightswd / ProcessGhosting
  ☆74Updated 3 years ago
• Rvn0xsy / Invoke-x64dbg-loaddll
  调用x64dbg中的loadll.exe白加黑示例代码
  ☆61Updated 11 months ago
• Rvn0xsy / ZeroLogon
  CVE-2020-1472 C++
  ☆83Updated 2 years ago
• scareing / cmd2shellcode
  cmd2shellcode
  ☆79Updated 4 years ago
• XTeam-Wing / SharpMimikatz
  Csharp 反射加载dll
  ☆40Updated 3 years ago
• Nan3r / geacon_apt
  geacon for apt profile
  ☆21Updated 2 years ago
• ASkyeye / MSBuild-AL-Bypass
  C# shellcode runner adapted to run from a csproj to be triggered by MSBuild
  ☆25Updated 3 years ago
• 1y0n / SharpRDPBatch
  批量检查远程桌面密码或ntlm是否正确
  ☆41Updated 4 years ago
• burpheart / CS_mock
  模拟cobalt strike beacon上线包. Simulation cobalt strike beacon connection packet.
  ☆78Updated 2 years ago
• loyalty-fox / idshwk7
  ☆13Updated 5 years ago
• Rvn0xsy / MyWin32CPP
  记录一下我学习的Win32CPP
  ☆55Updated 3 years ago
• kiwings / DLLHijacker
  ☆80Updated 6 years ago
• Richard-Tang / CrossC2-C2Profile
  CrossC2通信协议API实现
  ☆84Updated 3 years ago
• X1r0z / cpploader
  c++ shellcode loader
  ☆40Updated 2 years ago
• ac0d3r / 0xpe
  [windows]pe -> shellcode -> shellcodeLoader -> (pe2shellcode go on?)
  ☆77Updated 3 years ago
• Ridter / tshtun
  Py写的tsh的流量加解密过程。
  ☆28Updated 2 years ago
• crisprss / PetitPotam
  替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …
  ☆149Updated 3 years ago
• StudyCat404 / WhatAV
  windows pc 端杀毒软件识别（需要tasklist 命令执行的结果）
  ☆43Updated 4 years ago
• izj007 / CrackSleeve
  cs4.0 cs 4.1 beacon加解密
  ☆25Updated 4 years ago
• kyxiaxiang / CrackSleeve4.7
  ☆100Updated 2 years ago
• M-Kings / CVE-2021-36798
  Cobalt Strike < 4.4 dos CVE-2021-36798
  ☆37Updated 3 years ago