Alternatives and similar repositories for UnmanagedPowerShell

Users that are interested in UnmanagedPowerShell are comparing it to the libraries listed below

• Nariod / laz-y
  Automating payload generation for OSEP labs and exam.
  ☆34Updated 3 years ago
• waawaa / AMSI_Rubeus_bypass
  ☆70Updated 2 years ago
• 0xsp-SRD / callback_injection-Csharp
  this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…
  ☆86Updated 3 years ago
• Wh04m1001 / DiagTrackEoP
  ☆88Updated 2 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆56Updated 3 years ago
• deepinstinct / AMSI-Unchained
  Unchain AMSI by patching the provider’s unmonitored memory space
  ☆90Updated 2 years ago
• sbasu7241 / HellsGate
  Rewrote HellsGate in C# for fun and learning
  ☆86Updated 3 years ago
• NVISOsecurity / cs2br-bof
  Run Cobalt Strike BOFs in Brute Ratel C4!
  ☆68Updated 3 months ago
• Crypt0s / DelegationBOF
  ☆141Updated 3 years ago
• eladshamir / BadWindowsService
  An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities
  ☆61Updated 2 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆50Updated 2 months ago
• ChoiSG / OneDriveUpdaterSideloading
  Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post
  ☆98Updated 2 years ago
• tothi / SharpStay
  .NET project for installing Persistence
  ☆63Updated 3 years ago
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆105Updated 2 years ago
• Hypnoze57 / SharpHound4Cobalt
  C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)
  ☆56Updated 2 years ago
• Tw1sm / aesKrbKeyGen
  Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3
  ☆55Updated 3 years ago
• klezVirus / SharpLdapRelayScan
  C# Port of LdapRelayScan
  ☆85Updated 3 years ago
• EspressoCake / BeaconDownloadSync
  ☆94Updated 3 years ago
• EspressoCake / DLL-Exports-Extraction-BOF
  DLL Exports Extraction BOF with optional NTFS transactions.
  ☆82Updated 3 years ago
• icyguider / PowerChunker
  Bypass AMSI via PowerShell by splitting a file into multiple chunks
  ☆53Updated 3 years ago
• ausec-it / bof-registry
  Cobalt Strike beacon object file that allows you to query and make changes to the Windows Registry
  ☆27Updated 4 years ago
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆75Updated 2 years ago
• Hagrid29 / DumpAADSyncCreds
  C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD…
  ☆41Updated 2 years ago
• xforcered / Detect-Hooks
  Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
  ☆101Updated 3 years ago
• KINGSABRI / AssemblyLoader
  Various implementations for C# in memory execution. Assembly.Load() Assembly.LoadFile() AppDomain.ExecuteAssembly()
  ☆34Updated 4 years ago
• NotMedic / ArtifactKit
  ☆65Updated 3 years ago
• boku7 / halosgate-ps
  Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes
  ☆108Updated 2 years ago
• S4ntiagoP / donut
  Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…
  ☆113Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆56Updated 2 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆52Updated 2 years ago