Alternatives and similar repositories for LOLSpoof

Users that are interested in LOLSpoof are comparing it to the libraries listed below

• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• floesen / EventLogCrasher
  ☆188Updated last year
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆176Updated 3 months ago
• brosck / Reaper
  「💀」Proof of concept on BYOVD attack
  ☆164Updated 9 months ago
• cybersectroll / TrollAMSI
  ☆183Updated 3 months ago
• BlackSnufkin / Invoke-DumpMDEConfig
  PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges requir…
  ☆152Updated last year
• DarkSpaceSecurity / RunAs-Stealer
  RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
  ☆197Updated 6 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆140Updated last year
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆208Updated last year
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆206Updated last year
• mandiant / msi-search
  ☆287Updated 2 years ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆265Updated 10 months ago
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆141Updated last month
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆97Updated 4 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆173Updated 6 months ago
• gatariee / Winton
  Command and Control (C2) framework
  ☆131Updated 3 months ago
• BlackShell256 / Null-AMSI
  Null-AMSI is an AMSI and ETW bypass that takes advantage of .NET types (.NET Reflection) to bypassing AV/EDR.
  ☆72Updated 2 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆207Updated 10 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆122Updated 2 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆168Updated 4 months ago
• SafeBreach-Labs / wd-pretender
  ☆134Updated 2 years ago
• sensepost / mydumbedr
  ☆120Updated last year
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆134Updated last year
• ad0nis / ntlm_relay_gat
  ☆161Updated last year
• badsectorlabs / ludus_adaptix_c2
  An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts
  ☆165Updated 3 months ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆154Updated 7 months ago
• RePRGM / Nimperiments
  Various one-off pentesting projects written in Nim. Updates happen on a whim.
  ☆161Updated 2 months ago
• Peco602 / cobaltstrike-aggressor-scripts
  A collection of Cobalt Strike Aggressor scripts.
  ☆102Updated 3 years ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆213Updated 8 months ago