Alternatives and similar repositories for AmsiProvider

Users that are interested in AmsiProvider are comparing it to the libraries listed below

• decoder-it / Troopers24
  ☆41Updated 10 months ago
• ToweringDragoon / SACL_Scanner
  SACL Scanner is a tool designed to scan and analyze SACLs.
  ☆38Updated 3 months ago
• jsecurity101 / LDAPMon
  ☆45Updated last year
• andreisss / Living-off-the-COM-Type-Coercion-Abuse
  This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…
  ☆39Updated 2 weeks ago
• skelsec / adiskreader-secretsdump
  Extract registry and NTDS secrets from local or remote disk images
  ☆43Updated 2 months ago
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 8 months ago
• t94j0 / sddl_py
  Parse SDDL strings
  ☆36Updated last year
• slygoo / pssrecon
  ☆22Updated 7 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆40Updated last year
• EspressoCake / ADIDNS_Parser
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Updated 3 months ago
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆70Updated last year
• felmoltor / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆30Updated 2 months ago
• 0xRedpoll / SignalKeyBOF
  BOF to decrypt Signal Desktop chat logs
  ☆65Updated 3 months ago
• notEricaZelic / M365AdminAccessReviewer
  Shows which M365 Objects have Privileged Access and what type (i.e. PIM, Direct, Currently Elevated)
  ☆24Updated 2 weeks ago
• rasta-mouse / KerbApp
  ☆29Updated last year
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆38Updated 5 months ago
• snovvcrash / RemoteRegSave
  A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host
  ☆39Updated last year
• HackmichNet / SharpAzToken
  ☆60Updated last year
• nettitude / TokenCert
  TokenCert
  ☆97Updated 6 months ago
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆39Updated 10 months ago
• cbwang505 / FilesystemEoPDesktopSystemShell
  Folder Or File Delete to Get System Shell on Current Session Desktop
  ☆39Updated 4 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆38Updated 10 months ago
• jsecu / ModTask
  ☆52Updated 5 months ago
• X-C3LL / SharpNTLMRawUnHide
  C# version of NTLMRawUnHide
  ☆72Updated 2 years ago
• puzzlepeaches / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆34Updated last year
• OtterHacker / ShareFouine
  ☆50Updated 7 months ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆48Updated 5 months ago
• nickvourd / Rocabella
  Sniffing files generator
  ☆58Updated 3 months ago
• TheManticoreProject / DescribeNTSecurityDescriptor
  A cross-platform tool to parse and describe the contents of a raw ntSecurityDescriptor structure
  ☆41Updated last week
• nettitude / SharpConflux
  ☆65Updated last year