Alternatives and similar repositories for TLAD

Users that are interested in TLAD are comparing it to the libraries listed below

• G0ldenGunSec / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆33Updated 2 years ago
• redskal / malrdp-deploy
  Automated (kinda) deployment of MalRDP infrastructure with Terraform & Ansible
  ☆12Updated last year
• wsummerhill / IPv4Fuscation-Encrypted
  ☆19Updated last year
• GKNSB / HTMLSmuggler
  Smuggle a file to a user's browser
  ☆20Updated 3 years ago
• Flangvik / collector
  Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.
  ☆19Updated 3 years ago
• sakkis91 / SandboxPPL
  Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.
  ☆11Updated last month
• a7t0fwa7 / DllDragon
  A simple to use single-include Windows API resolver
  ☆22Updated last year
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year
• delivr-to / MailCollector
  A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM
  ☆20Updated last year
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• iamagarre / BadExclusions
  BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR
  ☆20Updated last year
• ChoiSG / GwisinMsi
  PoC MSI payload based on ASEC/AhnLab's blog post
  ☆23Updated 2 years ago
• Adepts-Of-0xCC / SnoopyOwl
  ☆48Updated 4 years ago
• OOAFA / squeegee
  A collection of tools using OCR to extract potential usernames from RDP screenshots.
  ☆30Updated last year
• attl4s / freeMetsrvLoader
  freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package
  ☆33Updated 2 years ago
• ps1337 / Lastenzug
  Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level
  ☆26Updated 2 years ago
• V3ded / ToolDump-v1
  Some of my custom "tools".
  ☆28Updated 3 years ago
• rkbennett / pyThreadlessInject
  A python port of CCob's ThreadlessInject
  ☆25Updated 2 years ago
• duckbillsecurity / pdf-smuggler
  Create PDFs with HTML smuggling attachments that save on opening the document.
  ☆30Updated last week
• OtterHacker / LabS4U2Self
  ☆31Updated 2 years ago
• Hackcraft-Labs / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆33Updated last year
• t3hbb / citrixphishlet
  Citrix Phishlet
  ☆24Updated 4 years ago
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆42Updated 8 months ago
• jnqpblc / SharpReg
  SharpReg is a simple code set to interact with the Remote Registry service api and is compatible with Cobalt Strike.
  ☆29Updated 5 years ago
• m8sec / EAPrimer
  C# project to Reflectively load .Net assemblies in memory
  ☆17Updated last year
• N4kedTurtle / SharpTeamsDump
  Dump Teams conversations
  ☆19Updated 4 years ago
• RedSiege / SharpCollectionTemplate
  ☆14Updated last year
• Allevon412 / BreadBear
  A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/
  ☆31Updated last year
• kapellos / VladimiRED
  ☆18Updated 6 months ago