Alternatives and similar repositories for NoAmci

Users that are interested in NoAmci are comparing it to the libraries listed below

• am0nsec / SharpHellsGate
  C# Implementation of the Hell's Gate VX Technique
  ☆216Updated 5 years ago
• mdsecactivebreach / firewalker
  ☆154Updated 5 years ago
• FuzzySecurity / Dendrobate
  Managed code hooking template.
  ☆133Updated 4 years ago
• karttoon / trigen
  Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
  ☆204Updated 8 years ago
• outflanknl / TamperETW
  PoC to demonstrate how CLR ETW events can be tampered.
  ☆190Updated 5 years ago
• riskydissonance / SafetyDump
  Dump stuff without touching disk
  ☆164Updated 5 years ago
• Barbarisch / forkatz
  credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege
  ☆123Updated 4 years ago
• b4rtik / SharpMiniDump
  Create a minidump of the LSASS process from memory
  ☆261Updated 3 years ago
• b4rtik / ATPMiniDump
  Evading WinDefender ATP credential-theft
  ☆255Updated 6 years ago
• rvrsh3ll / MSBuildAPICaller
  MSBuild Without MSBuild.exe
  ☆154Updated 4 years ago
• jfmaes / SharpHandler
  ☆185Updated 4 years ago
• WithSecureLabs / ppid-spoofing
  Scripts for performing and detecting parent PID spoofing
  ☆146Updated 5 years ago
• bats3c / EvtMute
  Apply a filter to the events being reported by windows event logging
  ☆264Updated 4 years ago
• djhohnstein / CSharpSetThreadContext
  C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread
  ☆119Updated 6 years ago
• bats3c / DefensiveInjector
  Shellcode injector using direct syscalls
  ☆123Updated 5 years ago
• Kudaes / LOLBITS
  ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …
  ☆217Updated 3 years ago
• moohax / xllpoc
  Code Exec via Excel
  ☆88Updated 8 years ago
• med0x2e / genxlm
  A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…
  ☆91Updated 6 years ago
• frkngksl / Celeborn
  Userland API Unhooker Project
  ☆110Updated 4 years ago
• matterpreter / SHAPESHIFTER
  Companion PoC for the "Adventures in Dynamic Evasion" blog post
  ☆129Updated 4 years ago
• Mr-Un1k0d3r / Shellcoding
  Shellcoding utilities
  ☆223Updated 5 years ago
• rvrsh3ll / SharpCOM
  CSHARP DCOM Fun
  ☆138Updated 6 years ago
• outflanknl / FindObjects-BOF
  A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…
  ☆276Updated 2 years ago
• n1xbyte / donutCS
  dem sharp donuts
  ☆201Updated 3 years ago
• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆127Updated 5 years ago
• TheWover / GhostLoader
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆162Updated 5 years ago
• rookuu / BOFs
  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.
  ☆183Updated 4 years ago
• DamonMohammadbagher / NativePayload_CBT
  NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)
  ☆118Updated 2 years ago
• xforcered / CredBandit
  Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…
  ☆247Updated 4 years ago
• S3cur3Th1sSh1t / SyscallAmsiScanBufferBypass
  AmsiScanBufferBypass using D/Invoke
  ☆136Updated 4 years ago