Alternatives and similar repositories for PowerDodder

Users that are interested in PowerDodder are comparing it to the libraries listed below

• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated 9 months ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆63Updated 10 months ago
• NoahKirchner / speedloader
  Rust template/library for implementing your own COFF loader
  ☆50Updated 3 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆76Updated 2 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• HulkOperator / AuthStager
  ☆55Updated 6 months ago
• OtterHacker / ShareFouine
  ☆50Updated 6 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆154Updated 5 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆154Updated 5 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆78Updated 2 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆98Updated 9 months ago
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆70Updated last year
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆29Updated last year
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆93Updated last week
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆64Updated 9 months ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated last month
• susMdT / ForsHops
  ForsHops
  ☆44Updated last month
• sudonoodle / BOF-entra-authcode-flow
  Beacon Object File (BOF) to obtain Entra tokens via authcode flow.
  ☆42Updated this week
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆74Updated 9 months ago
• joe-desimone / rep-research
  ☆75Updated 9 months ago
• xforcered / ForsHops
  ForsHops
  ☆131Updated last month
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆38Updated 10 months ago
• dmcxblue / PyObscura
  A python script that automates a C2 Profile build
  ☆40Updated last month
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 9 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆88Updated 2 weeks ago
• Teach2Breach / pool_party_rs
  remote process injections using pool party techniques
  ☆60Updated 3 months ago
• zero2504 / FrostLock-Injection
  FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…
  ☆24Updated last month
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆62Updated last year
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆47Updated last month
• rasta-mouse / SpawnWith
  ☆106Updated 2 months ago