Alternatives and similar repositories for FlyingAFalseFlag:

Users that are interested in FlyingAFalseFlag are comparing it to the libraries listed below

• SpiderLabs / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆106Updated 5 years ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆269Updated 5 years ago
• nccgroup / OneLogicalMyth_Shell
  A HTA shell to assist with breakout assessments.
  ☆112Updated 3 years ago
• nopfor / ntlm_challenger
  Parse NTLM challenge messages over HTTP and SMB
  ☆144Updated 2 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆145Updated 5 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆168Updated 4 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆231Updated 2 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆256Updated 6 years ago
• mdsecactivebreach / SharpPack
  An Insider Threat Toolkit
  ☆149Updated 6 years ago
• xorrior / raven
  CobaltStrike External C2 for Websockets
  ☆194Updated 5 years ago
• fox-it / LDAPFragger
  ☆189Updated 4 years ago
• ryhanson / ExternalC2
  A library for integrating communication channels with the Cobalt Strike External C2 server
  ☆283Updated 7 years ago
• decoder-it / whoami-priv-Hackinparis2019
  Slides from my talk in "Hackinparis" 2019 edition
  ☆91Updated 5 years ago
• Arno0x / NtlmRelayToEWS
  ntlm relay attack to Exchange Web Services
  ☆330Updated 7 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆124Updated 6 years ago
• decoder-it / powershellveryless
  Constrained Language Mode + AMSI bypass all in one
  ☆156Updated 5 years ago
• goichot / CVE-2020-3153
  Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal
  ☆105Updated 4 years ago
• soffensive / windowsblindread
  A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
  ☆201Updated last year
• outflanknl / Presentations
  Presentation material presented by Outflank team members at public events.
  ☆183Updated 2 months ago
• invokethreatguy / AggressorCollection
  Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors
  ☆151Updated 6 years ago
• Und3rf10w / external_c2_framework
  Python api for usage with cobalt strike's External C2 specification
  ☆229Updated last year
• Mr-Un1k0d3r / MaliciousClickOnceGenerator
  Quick Malicious ClickOnceGenerator for Red Team
  ☆251Updated 4 years ago
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆321Updated 5 years ago
• quickbreach / ExchangeRelayX
  An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
  ☆302Updated 2 years ago
• b4rtik / ATPMiniDump
  Evading WinDefender ATP credential-theft
  ☆254Updated 5 years ago
• sensepost / UserEnum
  Domain user enumeration tool
  ☆215Updated last year
• outflanknl / Recon-AD
  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  ☆322Updated 5 years ago
• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆182Updated 5 years ago
• elnerd / Get-NetNTLM
  Powershell module to get the NetNTLMv2 hash of the current user
  ☆93Updated 2 years ago
• 3xpl01tc0d3r / Callidus
  ☆161Updated 2 years ago