Alternatives and similar repositories for ProcessGhosting

Users that are interested in ProcessGhosting are comparing it to the libraries listed below

• NoOne-hub / bypass-BeaconEye
  bypass BeaconEye
  ☆88Updated 4 years ago
• OneSourceCat / creddump
  creddump bypass AV
  ☆42Updated 4 years ago
• WBGlIl / Beacon_re
  ☆89Updated 3 years ago
• scareing / UAC_wenpon
  UAC_wenpon
  ☆49Updated 3 years ago
• Ghost2097221 / selfMimikatz
  自不量力的mimikatz分离计划
  ☆44Updated 3 years ago
• timwhitez / Doge-Defense-Evasion-Ref
  Defense Evasion & Bypass AntiVirus reference
  ☆74Updated 4 years ago
• uknowsec / ReflectiveDLLInjection-Notes
  ReflectiveDLL学习代码
  ☆35Updated 5 years ago
• Jeffry38 / HiddenVNC
  A simple hidden vnc.
  ☆34Updated 4 years ago
• dust-life / run_pe
  ☆50Updated 4 years ago
• WBGlIl / ReflectiveDLL_Patch
  ☆37Updated 5 years ago
• izj007 / CrackSleeve
  cs4.0 cs 4.1 beacon加解密
  ☆25Updated 4 years ago
• Rvn0xsy / Blowbeef
  BlowBeef is a tool for analyzing WMI data.
  ☆18Updated 4 years ago
• scareing / cmd2shellcode
  cmd2shellcode
  ☆79Updated 4 years ago
• wilszdev / SchtasksUacBypass
  bypass UAC even when configured to always notify user
  ☆30Updated 4 years ago
• Ridter / tshtun
  Py写的tsh的流量加解密过程。
  ☆28Updated 3 years ago
• Rvn0xsy / PDacl
  Play Doh Windows ACL Tools
  ☆63Updated 3 years ago
• XTeam-Wing / SharpMimikatz
  Csharp 反射加载dll
  ☆41Updated 4 years ago
• timwhitez / Doge-Persistence-Platform
  后渗透持久化控制平台; Windows Persistence Platform;
  ☆48Updated 3 years ago
• timwhitez / Doge-RecycledGate
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆32Updated 3 years ago
• timwhitez / Doge-ScreenShot
  desktop screenshot
  ☆29Updated 2 years ago
• timwhitez / Doge-Direct-Syscall
  Golang Direct Syscall
  ☆31Updated 4 years ago
• XiaoliChan / Invoke-sAMSpoofing
  CVE-2021-42287/CVE-2021-42278 exploits in powershell
  ☆38Updated 3 years ago
• JDArmy / Lsass-Shtinkering
  dump lsass tool
  ☆38Updated 2 years ago
• crisprss / goHashDumper
  用于Dump指定进程的内存,主要利用静默退出机制(SilentProcessExit)和Windows API(MiniDumpW)实现
  ☆25Updated 3 years ago
• verctor / Cobalt_Homework
  分析cobaltstrike c2 协议
  ☆68Updated 5 years ago
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆68Updated 3 years ago
• HadesW / power-kill
  power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes
  ☆48Updated 3 years ago
• Rostelecom-Red-Team / GoodbyeEDR
  ☆81Updated 3 years ago
• timwhitez / Doge-CSBridge
  CS http Dynamic Encrypt Bridge.
  ☆46Updated 3 years ago
• idiotc4t / GetSystemEarlyBird
  这是一个直接取得系统权限的项目
  ☆48Updated 5 years ago