Alternatives and similar repositories for buffshark-shellcode-runner:

Users that are interested in buffshark-shellcode-runner are comparing it to the libraries listed below

• blackarrowsec / Certify
  Active Directory certificate abuse.
  ☆37Updated 3 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆50Updated last year
• EncodeGroup / RegSave
  A .NET implementation to dump SAM / SECURITY / SYSTEM registry hives
  ☆50Updated 4 years ago
• calebsargent / GoProcDump
  Golng version of SharpDump that can be used to extract LSASS or any other proces. Provides token elevation prior to creating dump of high…
  ☆21Updated 4 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆54Updated 3 years ago
• ricardojba / Invoke-noPac
  .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac
  ☆61Updated 2 years ago
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• exploitblizzard / Syscall-Example
  Using syscall to load shellcode, Evasion techniques
  ☆27Updated 3 years ago
• EspressoCake / DynamicTabRename
  CNA that interacts with a JAR file to dynamically rename GUI tabs within Cobalt Strike from a JSON file.
  ☆23Updated 2 years ago
• Hagrid29 / DumpAADSyncCreds
  C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD…
  ☆39Updated last year
• Tw1sm / aesKrbKeyGen
  Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3
  ☆50Updated 2 years ago
• ExAndroidDev / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆39Updated 3 years ago
• former-farmer / CVE-2023-24955-PoC
  Exploit for Microsoft SharePoint 2019
  ☆13Updated last year
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆96Updated 2 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆31Updated 2 years ago
• icyguider / PowerChunker
  Bypass AMSI via PowerShell by splitting a file into multiple chunks
  ☆50Updated 3 years ago
• Nariod / laz-y
  Automating payload generation for OSEP labs and exam.
  ☆34Updated 2 years ago
• OG-Sadpanda / SharpSword
  Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly
  ☆117Updated 5 months ago
• decoder-it / juicy_2
  juicypotato for win10 > 1803 & win server 2019
  ☆96Updated 4 years ago
• k4nfr3 / Dumpert
  LSASS memory dumper using direct system calls and API unhooking.
  ☆21Updated 4 years ago
• NinjaStyle82 / rbcd_permissions
  Add SD for controlled computer object to a target object for RBCD using LDAP
  ☆38Updated 3 years ago
• Henkru / cs-get-last-error
  An aggressor script for Cobalt Strike to query Windows' GetLastError messages
  ☆18Updated 2 years ago
• bugch3ck / SharpLdapWhoami
  WhoAmI by asking the LDAP service on a domain controller.
  ☆61Updated 3 years ago
• S3cur3Th1sSh1t / Nim_CBT_Shellcode
  CallBack-Techniques for Shellcode execution ported to Nim
  ☆56Updated 3 years ago
• mobdk / WinBoost
  Execute Mimikatz with different technique
  ☆51Updated 3 years ago
• sliverarmory / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆50Updated 3 years ago
• EspressoCake / HandleKatz_BOF
  A BOF port of the research of @thefLinkk and @codewhitesec
  ☆97Updated 3 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆140Updated 3 years ago