Alternatives and similar repositories for FormThief

Users that are interested in FormThief are comparing it to the libraries listed below

• cybersectroll / TrollUAC
  ☆144Updated last year
• wariv / DarkLnk
  Build sneaky & malicious LNK files.
  ☆146Updated 2 months ago
• 0xthirteen / AssemblyHunter
  Find .net assemblies locally
  ☆124Updated 2 years ago
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆182Updated last year
• nettitude / Aladdin
  ☆222Updated last year
• bohops / DynamicDotNet
  A collection of various and sundry code snippets that leverage .NET dynamic tradecraft
  ☆145Updated last year
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆98Updated 2 years ago
• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆116Updated last year
• powerseb / PowerExtract
  ☆119Updated 6 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆96Updated 5 months ago
• decoder-it / ChgPass
  ☆135Updated 7 months ago
• Octoberfest7 / lnk_generator
  Small project to facilitate creation of .lnk payloads
  ☆74Updated 2 years ago
• almandin / krbjack
  A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.
  ☆130Updated 8 months ago
• OmriBaso / BesoToken
  A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).
  ☆93Updated 2 years ago
• cybersectroll / TrollAMSI
  ☆182Updated 3 months ago
• decoder-it / KrbRelayEx-RPC
  ☆192Updated 6 months ago
• Macmod / ldapx
  Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
  ☆166Updated 9 months ago
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆139Updated last year
• d1rkmtrr / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆148Updated 2 years ago
• cybersectroll / TrollDisappearKey
  ☆49Updated 2 months ago
• 0xv1n / RemoteSessionEnum
  Remotely Enumerate sessions using undocumented Windows Station APIs
  ☆119Updated last year
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆120Updated last year
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆166Updated 3 months ago
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆208Updated last year
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆196Updated 2 years ago
• netero1010 / SCCMVNC
  A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…
  ☆102Updated 11 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆186Updated 2 years ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated 6 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆209Updated last year