Alternatives and similar repositories for WMI_Backdoor:

Users that are interested in WMI_Backdoor are comparing it to the libraries listed below

• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆319Updated 7 years ago
• johnnyDEP / OWA-Toolkit
  Powershell module to assist in attacking Exchange/Outlook Web Access
  ☆180Updated 8 years ago
• mubix / netview
  Netview enumerates systems using WinAPI calls
  ☆293Updated 3 years ago
• RedSiege / WMIOps
  This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
  ☆381Updated 8 months ago
• ramen0x3f / AggressorScripts
  ☆272Updated 2 years ago
• cobbr / ObfuscatedEmpire
  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
  ☆227Updated 7 years ago
• bhdresh / lazykatz
  Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software…
  ☆198Updated 7 years ago
• interference-security / empire-web
  PowerShell Empire Web Interface
  ☆329Updated last year
• Ben0xA / nps
  Not PowerShell
  ☆445Updated 8 years ago
• enigma0x3 / Powershell-Payload-Excel-Delivery
  Uses Invoke-Shellcode to execute a payload and persist on the system.
  ☆113Updated 8 years ago
• tevora-threat / eternal_blue_powershell
  Port of eternal blue exploits to powershell
  ☆150Updated 7 years ago
• sekirkity / BrowserGather
  Fileless web browser information extraction
  ☆218Updated 6 years ago
• cyberark / ketshash
  A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
  ☆169Updated 3 weeks ago
• secabstraction / WmiSploit
  ☆164Updated 9 years ago
• trustedsec / spraywmi
  SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on …
  ☆253Updated 9 years ago
• quickbreach / ExchangeRelayX
  An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
  ☆303Updated 2 years ago
• ztgrace / sticky_keys_hunter
  A script to test an RDP host for sticky keys and utilman backdoor.
  ☆257Updated 8 years ago
• DamonMohammadbagher / Meterpreter_Payload_Detection
  Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool
  ☆161Updated last year
• Mr-Un1k0d3r / SCT-obfuscator
  Cobalt Strike SCT payload obfuscator
  ☆141Updated 7 years ago
• xorrior / RandomPS-Scripts
  PowerShell Scripts focused on Post-Exploitation Capabilities
  ☆316Updated 7 years ago
• Arno0x / WebDavC2
  A WebDAV PROPFIND C2 tool
  ☆119Updated 5 years ago
• giMini / mimiDbg
  PowerShell oneliner to retrieve wdigest passwords from the memory
  ☆219Updated 7 years ago
• Kevin-Robertson / Tater
  Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec
  ☆451Updated 8 years ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆294Updated 4 years ago
• EmpireProject / PSInject
  Inject PowerShell into any process
  ☆225Updated 6 years ago
• ryhanson / ExternalC2
  A library for integrating communication channels with the Cobalt Strike External C2 server
  ☆282Updated 7 years ago
• mdsecactivebreach / PowerDNS
  PowerDNS: Powershell DNS Delivery
  ☆211Updated 6 years ago
• klsecservices / Invoke-Vnc
  Powershell VNC injector
  ☆334Updated 4 years ago
• breenmachine / dnsftp
  Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.
  ☆209Updated 9 years ago
• Arno0x / DBC2
  DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any m…
  ☆295Updated 7 years ago