Alternatives and similar repositories for evil-electron:

Users that are interested in evil-electron are comparing it to the libraries listed below

• jnqpblc / SharpDir
  SharpDir is a simple code set to search both local and remote file systems for files and is compatible with Cobalt Strike.
  ☆27Updated 5 years ago
• ASkyeye / CobaltPatch
  Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…
  ☆40Updated 4 years ago
• 0x3rhy / GetClipboard
  Cobalt Strike Get clipboard plugin
  ☆12Updated last year
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆48Updated 3 years ago
• RedCursorSecurityConsulting / SharpHashSpray
  An execute-assembly compatible tool for spraying local admin hashes on an Active Directory domain.
  ☆18Updated 4 years ago
• EncodeGroup / SharpDirLister
  .NET 4.0 Fast Directory / File Lister
  ☆26Updated 4 years ago
• timwhitez / JmpUnhook
  Ntdll Unhooking POC
  ☆19Updated 2 years ago
• xforcered / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆27Updated 3 years ago
• xforcered / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆54Updated 3 years ago
• CUHKJason / BOF-klist
  A simple BOF implementation of klist using Windows API
  ☆32Updated 2 years ago
• kartikdurg / Enum-LSASS
  LSASS enumeration like pypykatz written in C-Lang
  ☆20Updated 3 years ago
• Kudaes / Scripts
  Repository for dirty scripts and PoCs
  ☆17Updated 2 months ago
• johneiser / MalleableC2Parser
  A library to parse, modify, and implement Malleable C2 profiles
  ☆21Updated 6 years ago
• mdsecresearch / NSAMeetingWithProxyShell
  ☆18Updated 3 years ago
• mobdk / WinSpoof
  Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code
  ☆22Updated 2 years ago
• moloch-- / DarkLoadLibrary
  LoadLibrary for offensive operations
  ☆33Updated 3 years ago
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆36Updated 8 months ago
• timwhitez / Freeze-Common
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆14Updated 2 years ago
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• lassehauballe / Shellcode-Minidumpwritedump
  Shellcode for creating a minidump file of the lsass.exe process.
  ☆11Updated 2 years ago
• slemire / bof-adopt
  BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.
  ☆15Updated 2 years ago
• timwhitez / Bof2PIC
  BOF/COFF obj file to PIC(shellcode). by golang
  ☆39Updated 2 years ago
• BOFs / BOFs
  Beacon Object Files.
  ☆35Updated last year
• 0xC01DF00D / Mimigoatz
  Alternative Mimikatz LSASS DUMPER
  ☆12Updated 5 years ago
• audibleblink / xordump
  ☆18Updated 3 years ago
• EspressoCake / Needle_Sift_BOF
  Strstr with user-supplied needle and filename as a BOF.
  ☆32Updated 3 years ago
• timwhitez / Doge-Persist
  Windows Persistence Collection
  ☆12Updated 4 years ago
• TomOS3 / UserModeUnhooking
  This project is created for research into antivirus evasion by unhooking.
  ☆15Updated 3 years ago
• airzero24 / Atlas
  Lightweight C# windows agent for Apfell
  ☆17Updated 5 years ago
• okppp990 / phishlets
  ☆9Updated last year