Alternatives and similar repositories for Windows_Hunt:

Users that are interested in Windows_Hunt are comparing it to the libraries listed below

• LaresLLC / AzureTokenExtractor
  Extracts Azure authentication tokens from PowerShell process minidumps.
  ☆23Updated last year
• FuzzySecurity / Presentations
  A collection of my presentation materials.
  ☆16Updated 10 months ago
• infosecn1nja / e2modrewrite
  Convert Empire profiles to Apache mod_rewrite scripts
  ☆27Updated 5 years ago
• Cobalt-Strike / ZeroLogon-BOF
  ☆12Updated 4 years ago
• NVISOsecurity / cobalt-strike-notifier
  ☆13Updated 3 years ago
• hyp3rlinx / NtFileSins
  Windows File Enumeration Intel Gathering Tool.
  ☆17Updated last year
• NVISOsecurity / FileSearcher
  ☆24Updated 4 years ago
• Flangvik / collector
  Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.
  ☆19Updated 2 years ago
• ahmedkhlief / Scripts
  all published scripts devloped by ahmed khlief
  ☆20Updated 4 years ago
• outflanknl / RedFile
  Serving files with conditions, serverside keying and more.
  ☆17Updated 2 years ago
• jfmaes / Red-Route53-Interactive
  ☆17Updated 4 years ago
• BC-SECURITY / Invoke-SocksProxy
  Socks proxy server using powershell. Supports local and reverse connections for pivoting.
  ☆11Updated 4 years ago
• ChoiSG / GwisinMsi
  PoC MSI payload based on ASEC/AhnLab's blog post
  ☆23Updated 2 years ago
• samisecure / LsassDumpReflectiveDll
  Dump Lsass Memory Using a Reflective Dll
  ☆14Updated 3 years ago
• fozavci / ransoblin
  Ransoblin (Ransomware Bokoblin)
  ☆17Updated 4 years ago
• MrTuxx / aad-sso-enum-brute-spray
  Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…
  ☆13Updated 3 years ago
• byt3bl33d3r / PrivExchange
  Exchange your privileges for Domain Admin privs by abusing Exchange
  ☆16Updated 5 years ago
• vulncrate / infra-c2-covenant
  Red Team Infrastructure: Covenant C2
  ☆10Updated 4 years ago
• mobdk / winNoise
  Execute embedded Mimikatz
  ☆13Updated 3 years ago
• mgeeky / EvilClippy
  A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro…
  ☆23Updated 2 years ago
• Bl4ckM1rror / KerberoShutdown
  ☆16Updated 2 years ago
• shlyuz / teamserver
  ☆12Updated 2 years ago
• r3motecontrol / Sharp-Suite-CompiledBinaries
  Compiled Binaries for Sharp Suite
  ☆13Updated 5 years ago
• S3cur3Th1sSh1t / SharpByeBear
  AppXSVC Service race condition - privilege escalation
  ☆27Updated 5 years ago
• HuskyHacks / RustyTokenManipulation
  just manipulatin these here tokens yes sir nothing weird
  ☆22Updated 2 years ago
• R-Secure / AMSI-Bypasses
  This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…
  ☆23Updated 2 years ago
• tomcarver16 / SimpleInjector
  A simple injector that uses LoadLibraryA
  ☆17Updated 4 years ago
• hausec / CobaltStrikeToGhostWriter
  Log converter from CS log to Ghostwriter CSV
  ☆29Updated 4 years ago
• robomotic / invoke-antivm
  powershell tool for VM evasion
  ☆43Updated 4 years ago
• marcosimioni / omigood
  OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…
  ☆18Updated 3 years ago