Alternatives and similar repositories for AmsiProvider

Users that are interested in AmsiProvider are comparing it to the libraries listed below

• EspressoCake / ADIDNS_Parser
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Updated 7 months ago
• dirkjanm / scepreq
  SCEP request tool for AD CS and Intune
  ☆69Updated 2 months ago
• t94j0 / sddl_py
  Parse SDDL strings
  ☆36Updated last year
• andreisss / Living-off-the-COM-Type-Coercion-Abuse
  This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…
  ☆51Updated 4 months ago
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆74Updated last year
• 0xthirteen / rpc2wc
  RPC to WebClient startup
  ☆51Updated last month
• nettitude / TokenCert
  TokenCert
  ☆100Updated 10 months ago
• NocteDefensor / SCCMDecryptor-BOF
  ☆49Updated 3 months ago
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆80Updated 6 months ago
• outflanknl / regcertipy
  Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does
  ☆29Updated 3 months ago
• hoodoer / DragonHash
  Demo code JavaScript POC that tricks user into sending Windows hash to responder
  ☆35Updated 3 months ago
• ZephrFish / GoClipC2
  Clipboard for Command and Control between VDI, RDP and Others on Windows
  ☆48Updated 3 months ago
• nullenc0de / trust-validator
  Validates priv escalation of AD trusts
  ☆47Updated 6 months ago
• leftp / BackupCreds
  A C# implementation of dumping credentials from Windows Credential Manager
  ☆60Updated 2 years ago
• OtterHacker / ShareFouine
  ☆51Updated 11 months ago
• G0ldenGunSec / SCCM_SQL_Collector
  PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph
  ☆24Updated 2 months ago
• kozmer / rspy
  rust port of pspy with support for process monitoring over dbus
  ☆35Updated 3 months ago
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆37Updated 5 months ago
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆42Updated 9 months ago
• BlWasp / WDSFinder
  A simple tool to identify WDS servers in Active Directory
  ☆30Updated last month
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆56Updated 5 months ago
• Leo4j / KeyCredentialLink
  Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute
  ☆23Updated last year
• xpn / adfstoolkit
  ☆36Updated 8 months ago
• FalconForceTeam / reply-url-brute
  Tool to enumerate unregistered reply URLs for single and multitenant apps in Azure
  ☆15Updated 8 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated last year
• ToweringDragoon / SACL_Scanner
  SACL Scanner is a tool designed to scan and analyze SACLs.
  ☆44Updated 7 months ago
• jsecu / ModTask
  ☆53Updated last week
• slygoo / pssrecon
  ☆37Updated 11 months ago
• nickvourd / Rocabella
  Sniffing files generator
  ☆59Updated 7 months ago
• p0dalirius / bhopengraph
  A python library to create BloodHound OpenGraphs
  ☆25Updated 2 weeks ago