Alternatives and similar repositories for WinPIT

Users that are interested in WinPIT are comparing it to the libraries listed below

• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 6 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆87Updated 2 years ago
• perturbed-platypus / UEFIWriteCSharp
  ☆42Updated 6 years ago
• FuzzySecurity / Driver-Template
  Bare template for a Kernel Mode Driver
  ☆51Updated 5 years ago
• perturbed-platypus / UEFIReadCSharp
  ☆33Updated 6 years ago
• slyd0g / SK8PARK
  Python 3 server used to control SK8RAT implant
  ☆36Updated 4 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• padovah4ck / RedSharp
  Penetration Test / Read Team - C# tools repository
  ☆56Updated 3 years ago
• checkymander / CoreSploit
  Initial Commit of Coresploit
  ☆57Updated 4 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆69Updated 4 years ago
• jackullrich / universal-syscall-64
  Resolve syscall numbers at runtime for all Windows versions.
  ☆61Updated last year
• SolomonSklash / UnhookingPOC
  A small commented POC for removing API hooks placed by AV/EDR.
  ☆34Updated 5 years ago
• marcin-chwedczuk / dll-inject
  Simple DLL injector written in C#
  ☆24Updated 10 years ago
• TheWover / EasyNet
  Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…
  ☆94Updated 6 years ago
• apt69 / RibeyeSpecial
  medium-rare
  ☆28Updated 6 years ago
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆26Updated 5 years ago
• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 7 years ago
• phra / x0rro
  A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2
  ☆140Updated 2 years ago
• TheWover / Manager
  Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
  ☆64Updated 6 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆79Updated 5 years ago
• limbenjamin / LogServiceCrash
  POC code to crash Windows Event Logger Service
  ☆27Updated 5 years ago
• Soledge / BlockEtw
  .Net Assembly to block ETW telemetry in current process
  ☆81Updated 5 years ago
• RedLectroid / APIunhooker
  C++ function that will automagically unhook a specified Windows API
  ☆62Updated 5 years ago
• NVISOsecurity / DInvisibleRegistry
  DInvisibleRegistry
  ☆82Updated 5 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆17Updated 7 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 7 years ago
• malcomvetter / AntiDebug
  PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
  ☆32Updated 7 years ago
• CCob / PwnyForm
  ☆48Updated 5 years ago
• 0xbadjuju / TellMeYourSecrets
  A C# DLL to Dump LSA Secrets
  ☆58Updated 7 years ago
• AltF5 / CSharp-CmdLineHelper-Parser
  A "no frills" 1 class-only, C# .NET command line parser with support for - and / args, switches only, and Name : Values
  ☆34Updated last year