Alternatives and similar repositories for CobaltStrikeDetect

Users that are interested in CobaltStrikeDetect are comparing it to the libraries listed below

• NoOne-hub / bypass-BeaconEye
  bypass BeaconEye
  ☆88Updated 3 years ago
• WBGlIl / Beacon_re
  ☆89Updated 3 years ago
• WBGlIl / ReflectiveDLL_Patch
  ☆37Updated 5 years ago
• dust-life / run_pe
  ☆50Updated 3 years ago
• ac0d3r / 0xpe
  [windows]pe -> shellcode -> shellcodeLoader -> (pe2shellcode go on?)
  ☆77Updated 3 years ago
• Rvn0xsy / MyWin32CPP
  记录一下我学习的Win32CPP
  ☆55Updated 3 weeks ago
• burpheart / CS_mock
  模拟cobalt strike beacon上线包. Simulation cobalt strike beacon connection packet.
  ☆78Updated 3 years ago
• Rvn0xsy / Invoke-x64dbg-loaddll
  调用x64dbg中的loadll.exe白加黑示例代码
  ☆63Updated last year
• verctor / Cobalt_Homework
  分析cobaltstrike c2 协议
  ☆68Updated 5 years ago
• OneSourceCat / creddump
  creddump bypass AV
  ☆42Updated 4 years ago
• Ryze-T / EdrKiller
  ☆92Updated 4 years ago
• crisprss / goHashDumper
  用于Dump指定进程的内存,主要利用静默退出机制(SilentProcessExit)和Windows API(MiniDumpW)实现
  ☆25Updated 3 years ago
• scareing / UAC_wenpon
  UAC_wenpon
  ☆49Updated 3 years ago
• knightswd / ProcessGhosting
  ☆74Updated 4 years ago
• Ghost2097221 / selfMimikatz
  自不量力的mimikatz分离计划
  ☆44Updated 3 years ago
• Richard-Tang / CrossC2-C2Profile
  CrossC2通信协议API实现
  ☆84Updated 4 years ago
• scareing / cmd2shellcode
  cmd2shellcode
  ☆79Updated 4 years ago
• uknowsec / CreateService
  创建服务持久化
  ☆107Updated 4 years ago
• huoji120 / DuckSysEye
  SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
  ☆63Updated 3 years ago
• XTeam-Wing / SharpMimikatz
  Csharp 反射加载dll
  ☆40Updated 4 years ago
• rootclay / Windows-Access-Control
  Windows权限控制与其存在的安全问题
  ☆58Updated 4 years ago
• t43Wiu6 / CVE-2019-0887
  exp for CVE-2019-0887
  ☆19Updated 4 years ago
• loyalty-fox / idshwk7
  ☆13Updated 5 years ago
• ASkyeye / MSBuild-AL-Bypass
  C# shellcode runner adapted to run from a csproj to be triggered by MSBuild
  ☆25Updated 3 years ago
• jas502n / cs_yara
  check cs yara rules
  ☆42Updated 3 years ago
• waterrr / BlackIP
  扫描CobaltStrike的恶意IP
  ☆31Updated 3 years ago
• qigpig / bypass-beacon-config-scan
  Bypass cobaltstrike beacon config scan
  ☆84Updated 4 years ago
• Cc28256 / HijackScan
  白文件扫描器 非公开
  ☆28Updated 3 years ago
• fuluke / Kdmapper-Bypass360
  过360拦截加载无驱动签名
  ☆60Updated 3 years ago
• crisprss / PrintSpoofer
  PrintSpoofer的反射dll实现，结合Cobalt Strike使用
  ☆88Updated 3 years ago