Alternatives and similar repositories for adPentest

Users that are interested in adPentest are comparing it to the libraries listed below

• Kudaes / Eclipse
  Activation Context Hijack
  ☆169Updated 6 months ago
• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆289Updated last month
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆206Updated last year
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆139Updated 5 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆280Updated 4 months ago
• mez-0 / citadel
  A Payload Analysis Framework
  ☆115Updated 4 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• warpnet / COM-Fuzzer
  Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…
  ☆156Updated 2 months ago
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆293Updated 5 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆261Updated 5 months ago
• dis0rder0x00 / DbgNexum
  Shellcode injection using the Windows Debugging API
  ☆165Updated last month
• vulnableone / BypassX
  The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.
  ☆27Updated last year
• whokilleddb / ASPxecute
  Execute shellcode via ASPNET compiler
  ☆60Updated 4 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆159Updated last year
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆161Updated 5 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆123Updated 9 months ago
• BlackSnufkin / NyxInvoke
  NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…
  ☆231Updated last year
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆124Updated last year
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆50Updated last year
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆177Updated last year
• safedv / Rustic64
  64-bit, position-independent implant template for Windows in Rust.
  ☆171Updated 2 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆191Updated 9 months ago
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆32Updated last year
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆120Updated last year
• RedSiege / Chromatophore
  Utilities for obfuscating shellcode
  ☆98Updated 4 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆101Updated 2 weeks ago
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆51Updated last year
• tehstoni / RustyKeys
  UAC Bypass using CMSTP in Rust
  ☆34Updated last year