Alternatives and similar repositories for RunAsSystem

Users that are interested in RunAsSystem are comparing it to the libraries listed below

• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 7 years ago
• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 5 years ago
• perturbed-platypus / UEFIWriteCSharp
  ☆41Updated 5 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆74Updated 5 years ago
• umarfarook882 / Windows-InstallerBypass
  Windows Installer Bypass using Rollback Script .rbs and .rbf - Race Condition
  ☆22Updated 6 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆88Updated 2 years ago
• jthuraisamy / CVE-2019-9730
  Synaptics Audio Driver LPE
  ☆37Updated 6 years ago
• irsl / CVE-2020-0728
  Proof of Concept code for CVE-2020-0728
  ☆46Updated 5 years ago
• tophertimzen / shellcodeTester
  GUI Application in C# to run and disassemble shellcode
  ☆35Updated 7 years ago
• 3gstudent / SCTPersistence
  Create COM Objects backed by Scripts, not DLLs
  ☆9Updated 7 years ago
• scottlundgren / w32time
  ☆54Updated 6 years ago
• ThunderGunExpress / Reflective_Schtasks
  ☆54Updated 6 years ago
• maaaaz / mimicertz
  A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates
  ☆24Updated 6 years ago
• Iamgublin / CVE-2019-0803
  Win32k Elevation of Privilege Poc
  ☆1Updated 6 years ago
• rastating / slae
  The source code of the SLAE assignments documented at https://rastating.github.io/
  ☆23Updated 6 years ago
• cornerpirate / gitshell
  A PoC .net shell which uses a GitHub.com repository for the communication channel.
  ☆11Updated 6 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆53Updated 6 years ago
• vletoux / DetectPasswordViaNTLMInFlow
  Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …
  ☆59Updated 6 years ago
• whiteHat001 / MIcrosoft-Word-Use-After-Free
  ☆17Updated 5 years ago
• perturbed-platypus / UEFIReadCSharp
  ☆33Updated 5 years ago
• kafkaesqu3 / subtee-gist-mirror
  few months old but better than nothing
  ☆58Updated 3 years ago
• rvrsh3ll / MSSQLUDPScanner
  Discover MSSQL Instances via UDP Scanning
  ☆25Updated 6 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 8 years ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• malcomvetter / AntiDebug
  PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
  ☆32Updated 6 years ago
• Dankirk / RegSLScan
  A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
  ☆46Updated 5 years ago
• panagioto / Mimir
  A C++ POC for process injection using NtCreateSectrion, NtMapViewOfSection and RtlCreateUserThread. Credit to @spotheplanet for his notes…
  ☆43Updated 4 years ago
• 0xeb-bp / cve-2020-1015
  PoC for CVE-2020-1015
  ☆40Updated 5 years ago
• davehardy20 / PoSHBypass
  ☆25Updated 7 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago