Alternatives and similar repositories for SilentButDeadly

Users that are interested in SilentButDeadly are comparing it to the libraries listed below

• 0xflux / Wyrm
  The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.
  ☆428Updated last week
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆169Updated 11 months ago
• kfallahi / UnderlayCopy
  PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads
  ☆236Updated 2 months ago
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆262Updated 3 months ago
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆260Updated this week
• wietze / Invoke-ArgFuscator
  Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-nat…
  ☆259Updated 8 months ago
• lolc2 / lolc2.github.io
  lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection
  ☆252Updated 7 months ago
• arosenmund / defcon33_silence_kill_edr
  ☆332Updated 4 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆203Updated 4 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆269Updated last year
• logangoins / Krueger
  Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC
  ☆400Updated 3 months ago
• SaadAhla / dark-kill
  A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Cal…
  ☆251Updated 7 months ago
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆422Updated 6 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆216Updated last year
• synacktiv / GroupPolicyBackdoor
  Group Policy Objects manipulation and exploitation framework
  ☆283Updated last month
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆214Updated 2 months ago
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆147Updated 3 months ago
• BlackSnufkin / Invoke-DumpMDEConfig
  PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges requir…
  ☆154Updated last year
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆280Updated 3 months ago
• Maldev-Academy / DumpBrowserSecrets
  Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bo…
  ☆216Updated this week
• django-88 / NomadScanner
  ☆164Updated last month
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆164Updated 5 months ago
• 3lp4tr0n / SessionHop
  Windows Session Hijacking via COM
  ☆324Updated 3 weeks ago
• boku7 / venom
  Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence
  ☆413Updated 2 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆220Updated 8 months ago
• rvrsh3ll / Bolthole
  Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.
  ☆263Updated 8 months ago
• MorDavid / vCenterHound
  Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using Custom Nodes/Edges
  ☆175Updated 4 months ago
• almounah / silph
  Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall
  ☆96Updated 3 weeks ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆187Updated last year
• 0xdea / blindsight
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆247Updated 2 months ago