Alternatives and similar repositories for proctools:

Users that are interested in proctools are comparing it to the libraries listed below

• Karkas66 / CelestialSpark
  A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust
  ☆83Updated 10 months ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆87Updated 7 months ago
• ASP4RUX / bypassEDR-AV
  ☆54Updated 3 months ago
• sfewer-r7 / CVE-2023-34362
  CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
  ☆63Updated 10 months ago
• 0xsp-SRD / 0xsp.com
  a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab
  ☆62Updated last month
• fin3ss3g0d / NativeThreadpool
  Work, timer, and wait callback example using solely Native Windows APIs.
  ☆85Updated last year
• cybersectroll / TrollDump
  ☆80Updated 8 months ago
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆55Updated 8 months ago
• rasta-mouse / SpawnWith
  ☆93Updated 11 months ago
• HulkOperator / AuthStager
  ☆52Updated 3 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆122Updated last year
• foxlox / hypobrychium
  Duplicate not owned Token from Running Process
  ☆72Updated last year
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆65Updated 6 months ago
• cybersectroll / SharpPersistSD
  ☆85Updated 9 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆52Updated 2 months ago
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆78Updated last year
• tehstoni / tryharder
  C++ Staged Shellcode Loader with Evasion capabilities.
  ☆79Updated 4 months ago
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆52Updated 5 months ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆39Updated 8 months ago
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆114Updated last year
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆98Updated last year
• dadevel / impacket-zsh-integration
  ZSH integration for Impacket
  ☆58Updated 3 weeks ago
• duck-sec / CVE-2023-28252-Compiled-exe
  A modification to fortra's CVE-2023-28252 exploit, compiled to exe
  ☆53Updated last year
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆72Updated 2 years ago
• dru1d-foofus / GetLAPSPassword
  A LAPS dumper written using the impacket library.
  ☆31Updated last year
• two06 / CerealKiller
  .NET deserialization hunter
  ☆76Updated 6 months ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆79Updated 2 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 6 months ago
• sliverarmory / hashdump
  Dump Windows SAM hashes
  ☆41Updated last year