Alternatives and similar repositories for AM0N-Eye

Users that are interested in AM0N-Eye are comparing it to the libraries listed below

• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆55Updated last year
• Hagrid29 / BOF-SprayAD
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆47Updated 2 years ago
• JDArmy / Lsass-Shtinkering
  dump lsass tool
  ☆39Updated 2 years ago
• BOFs / BOFs
  Beacon Object Files.
  ☆35Updated last year
• ASkyeye / AB
  Cs-Sleep-Mask-Fiber
  ☆18Updated 2 weeks ago
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆98Updated last year
• timwhitez / Doge-COFFLdr
  Its a coff loader ported to go( Modified by TimWhite )
  ☆27Updated last year
• XiaoliChan / PetitPotam-V2
  More EFS coerced authentication method with PetitPotam.py
  ☆24Updated 2 years ago
• aleenzz / ADExplorerX
  ☆45Updated 11 months ago
• WafflesExploits / CobaltStrike-YARA-Bypass-f0b627fc
  Repository of scripts from my blog post on bypassing the YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellco…
  ☆39Updated 7 months ago
• dreamkinn / go-ThreadlessInject
  Golang implementation of @CCob's C# ThreadlessInject
  ☆32Updated last year
• Rvn0xsy / AsmShellcodeLoader
  汇编语言编写Shellcode加载器源代码 https://payloads.online/archivers/2022-02-16/1/
  ☆78Updated 2 years ago
• timwhitez / iSliver
  Learning notes of amazing Sliver C2 project.
  ☆25Updated 2 years ago
• ASkyeye / Artillery
  CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…
  ☆14Updated last year
• timwhitez / Doge-Unhook
  DLL Unhooking
  ☆12Updated 4 years ago
• lsecqt / CVE-2022-26923-Powershell-POC
  A powershell poc to load and automatically run Certify and Rubeus from memory.
  ☆17Updated 2 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆40Updated last year
• OG-Sadpanda / SharpZippo
  List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly
  ☆60Updated 3 years ago
• Ridter / netsync
  Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.
  ☆50Updated 3 months ago
• W01fh4cker / MemshellKit
  针对多个框架的高度自定义的内存马一键打入工具 | A highly customized memory shell one-click injection tool for multiple frameworks
  ☆47Updated last year
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• timwhitez / memmod
  Fork & modify of Wireguard's Memmod
  ☆32Updated last year
• N1k0la-T / CVE-2023-21707
  CVE-2023-21707 EXP
  ☆28Updated last year
• kyxiaxiang / Safetasklist
  Help red teams find opsec processes during engagements
  ☆40Updated 5 months ago
• timwhitez / Doge-CLRLoad
  load assembly executable file in memory
  ☆41Updated last year
• mbadanoiu / CVE-2024-37081
  CVE-2024-37081: Multiple Local Privilege Escalation in VMware vCenter Server
  ☆10Updated 10 months ago
• rootsecdev / CVE-2023-46604
  Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)
  ☆15Updated 10 months ago
• jbaines-r7 / blankspace
  Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)
  ☆63Updated 3 years ago
• apkc / CVE-2024-26229-BOF
  BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel
  ☆24Updated 11 months ago
• realstatus / CVE-2024-40711-Exp
  CVE-2024-40711-exp
  ☆42Updated 7 months ago