Alternatives and similar repositories for Windows-RPC-Backdoor

Users that are interested in Windows-RPC-Backdoor are comparing it to the libraries listed below

• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆45Updated 3 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆138Updated 3 years ago
• Kara-4search / HellgateLoader_CSharp
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆16Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆102Updated 3 years ago
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆36Updated 3 years ago
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆120Updated 3 years ago
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆138Updated 2 years ago
• Octoberfest7 / Mutants_Sessions_Self-Deletion
  Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.
  ☆127Updated 3 years ago
• sliverarmory / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆32Updated 3 years ago
• ceramicskate0 / SharpExchange
  C# Tool to interact with MS Exchange based on MS docs
  ☆101Updated 2 years ago
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆108Updated last year
• Octoberfest7 / EventViewerUAC_BOF
  Beacon Object File implementation of Event Viewer deserialization UAC bypass
  ☆131Updated 3 years ago
• mez-0 / winrmdll
  C++ WinRM API via Reflective DLL
  ☆146Updated 3 years ago
• nettitude / RunOF
  ☆146Updated 2 years ago
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆75Updated 2 years ago
• Octoberfest7 / JumpSession_BOF
  Beacon Object File allowing creation of Beacons in different sessions.
  ☆81Updated 3 years ago
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆43Updated 3 years ago
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆150Updated 3 years ago
• Henkru / cs-token-vault
  In-memory token vault BOF for Cobalt Strike
  ☆145Updated 2 years ago
• sliverarmory / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆51Updated 3 years ago
• pwn1sher / uuid-loader
  UUID based Shellcode loader for your favorite C2
  ☆86Updated 3 years ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆141Updated 3 years ago
• MrAle98 / BOF-RunPE
  ☆55Updated 2 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆85Updated 3 years ago
• SolomonSklash / SyscallPOC
  Shellcode injection POC using syscalls.
  ☆116Updated 5 years ago
• kyleavery / TitanLdr
  Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.
  ☆146Updated 3 years ago
• trustedsec / PPLFaultDumpBOF
  ☆142Updated 2 years ago
• EspressoCake / Self_Deletion_BOF
  BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs
  ☆183Updated 3 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆78Updated 3 years ago
• magnusstubman / MagnusKatz
  Research project for understanding how Mimikatz work and become better at C
  ☆124Updated 3 years ago