optiv / ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
☆2,813Updated last year
Alternatives and similar repositories for ScareCrow:
Users that are interested in ScareCrow are comparing it to the libraries listed below
- A post exploitation framework designed to operate covertly on heavily monitored environments☆2,095Updated 3 years ago
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆1,915Updated 2 months ago
- Extract credentials from lsass remotely☆2,111Updated last week
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆1,896Updated 5 months ago
- Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure …☆2,467Updated 2 weeks ago
- A collaborative, multi-platform, red teaming framework☆3,619Updated 3 weeks ago
- Automation for internal Windows Penetrationtest / AD-Security☆3,485Updated 5 months ago
- ☆2,094Updated 2 years ago
- Starkiller is a Frontend for PowerShell Empire.☆1,472Updated last month
- Tool for Active Directory Certificate Services enumeration and abuse☆2,729Updated 8 months ago
- Template-Driven AV/EDR Evasion Framework☆1,673Updated last year
- Trying to tame the three-headed dog.☆4,423Updated 3 weeks ago
- The swiss army knife of LSASS dumping☆1,922Updated 7 months ago
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,607Updated 2 years ago
- Covenant is a collaborative .NET C2 framework for red teamers.☆4,378Updated 9 months ago
- Some notes and examples for cobalt strike's functionality☆1,060Updated 3 years ago
- A tool to perform Kerberos pre-auth bruteforcing☆2,883Updated 8 months ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,452Updated last year
- Privilege Escalation Enumeration Script for Windows☆3,257Updated 2 months ago
- a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )☆2,356Updated last month
- Identifies the bytes that Microsoft Defender flags on.☆2,439Updated last year
- ☆1,465Updated last year
- Abusing impersonation privileges through the "Printer Bug"☆1,988Updated 4 years ago
- Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.☆1,497Updated 3 years ago
- DeimosC2 is a Golang command and control framework for post-exploitation.☆1,114Updated 2 weeks ago
- A Python based ingestor for BloodHound☆2,101Updated last month
- The Hunt for Malicious Strings☆1,208Updated 2 years ago
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,246Updated last year
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆1,958Updated last month
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆1,190Updated 11 months ago