optiv / ScareCrowLinks
ScareCrow - Payload creation framework designed around EDR bypass.
☆2,834Updated last year
Alternatives and similar repositories for ScareCrow
Users that are interested in ScareCrow are comparing it to the libraries listed below
Sorting:
- A post exploitation framework designed to operate covertly on heavily monitored environments☆2,102Updated 3 years ago
- Extract credentials from lsass remotely☆2,129Updated 2 weeks ago
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆1,973Updated 3 weeks ago
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆1,951Updated 7 months ago
- Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure …☆2,536Updated last month
- Template-Driven AV/EDR Evasion Framework☆1,700Updated last year
- The swiss army knife of LSASS dumping☆1,964Updated 9 months ago
- Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing…☆1,631Updated 2 years ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,471Updated last year
- Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.☆1,516Updated 3 years ago
- DeimosC2 is a Golang command and control framework for post-exploitation.☆1,122Updated 2 months ago
- A collaborative, multi-platform, red teaming framework☆3,814Updated this week
- Identifies the bytes that Microsoft Defender flags on.☆2,481Updated last year
- ☆2,118Updated 2 years ago
- The Hunt for Malicious Strings☆1,244Updated 2 months ago
- Some notes and examples for cobalt strike's functionality☆1,094Updated 3 years ago
- ☆1,488Updated last year
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆1,237Updated last year
- PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.☆2,029Updated 10 months ago
- Starkiller is a Frontend for PowerShell Empire.☆1,510Updated this week
- Open-Source Shellcode & PE Packer☆1,981Updated last year
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆1,451Updated last year
- Situational Awareness commands implemented using Beacon Object Files☆1,477Updated 2 weeks ago
- Automation for internal Windows Penetrationtest / AD-Security☆3,522Updated 7 months ago
- Windows Privilege Escalation from User to Domain Admin.☆1,401Updated 2 years ago
- ☆1,598Updated 2 months ago
- Some usefull Scripts and Executables for Pentest & Forensics☆1,128Updated 2 weeks ago
- A tool to kill antimalware protected processes☆1,454Updated 4 years ago
- Privilege Escalation Enumeration Script for Windows☆3,364Updated 2 weeks ago
- C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527☆1,906Updated 3 years ago