Alternatives and similar repositories for PS-MOTW:

Users that are interested in PS-MOTW are comparing it to the libraries listed below

• ADPunisher / OwnershipStealer
  ☆27Updated last year
• G0ldenGunSec / DayBird
  Extension functionality for the NightHawk operator client
  ☆26Updated last year
• jborean93 / AmsiProvider
  Test AMSI Provider implementation in C#
  ☆41Updated 2 months ago
• D4rthMaulCop / DumpKernel-S1
  A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80
  ☆19Updated last year
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated 11 months ago
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆55Updated 8 months ago
• JonasBK / Powershell
  ☆33Updated 2 weeks ago
• decoder-it / Troopers24
  ☆41Updated 7 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆38Updated 7 months ago
• jsecurity101 / LDAPMon
  ☆45Updated last year
• joe-desimone / rep-research
  ☆68Updated 6 months ago
• OffenseTeacher / Steganim
  ☆47Updated last year
• a7t0fwa7 / SymProcSleuth
  A pure C version of SymProcAddress
  ☆25Updated 11 months ago
• tijme / conferences
  Some of the presentations, workshops, and labs I gave at public conferences.
  ☆29Updated 5 months ago
• HulkOperator / AuthStager
  ☆52Updated 3 months ago
• Crowdfense / CVE-2024-21338
  Windows AppLocker Driver (appid.sys) LPE
  ☆48Updated 6 months ago
• t94j0 / sddl_py
  Parse SDDL strings
  ☆34Updated 10 months ago
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆38Updated 6 months ago
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated 9 months ago
• nullsection / Sneaky-DLL-Stager
  Reasonably undetected shellcode stager and executer.
  ☆35Updated 5 months ago
• EvilBytecode / Lifetime-AmsiBypass
  Lifetime AMSI bypass.
  ☆35Updated 7 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆39Updated 3 months ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆14Updated 7 months ago
• fern89 / runpe-x64
  RunPE adapted for x64 and written in C, does not use RWX
  ☆23Updated 9 months ago
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆36Updated 5 months ago
• rtfmkiesel / loldrivers-client
  Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io
  ☆81Updated last year
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆38Updated last year
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆75Updated 6 months ago
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year