Alternatives and similar repositories for CodeExecutionOnWindows:

Users that are interested in CodeExecutionOnWindows are comparing it to the libraries listed below

• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• two06 / Inception
  Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  ☆367Updated 11 months ago
• praetorian-inc / vulcan
  a tool to make it easy and fast to test various forms of injection
  ☆172Updated 5 years ago
• ewhitehats / InvisiblePersistence
  Persisting in the Windows registry "invisibly"
  ☆340Updated 6 years ago
• hoangprod / AndrewSpecial
  AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
  ☆385Updated 5 years ago
• endgameinc / ClrGuard
  ☆213Updated 6 years ago
• OneLogicalMyth / zeroday-powershell
  A PowerShell example of the Windows zero day priv esc
  ☆323Updated 6 years ago
• 0xbadjuju / WheresMyImplant
  A Bring Your Own Land Toolkit that Doubles as a WMI Provider
  ☆285Updated 6 years ago
• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆320Updated 7 years ago
• threatexpress / metatwin
  The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…
  ☆340Updated 2 months ago
• cobbr / PSAmsi
  PSAmsi is a tool for auditing and defeating AMSI signatures.
  ☆389Updated 6 years ago
• Cybereason / Invoke-WMILM
  ☆229Updated 6 years ago
• EmpireProject / PSInject
  Inject PowerShell into any process
  ☆223Updated 6 years ago
• silentbreaksec / Throwback
  HTTP/S Beaconing Implant
  ☆304Updated 7 years ago
• vysecurity / morphHTA
  morphHTA - Morphing Cobalt Strike's evil.HTA
  ☆520Updated last year
• outflanknl / Excel4-DCOM
  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  ☆322Updated 5 years ago
• leechristensen / UnmanagedPowerShell
  Executes PowerShell from an unmanaged process
  ☆480Updated 8 years ago
• GhostPack / SharpRoast
  DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.
  ☆254Updated 6 years ago
• hegusung / AVSignSeek
  Tool written in python3 to determine where the AV signature is located in a binary/payload
  ☆314Updated 6 years ago
• xorrior / Random-CSharpTools
  Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
  ☆224Updated 5 years ago
• cobbr / ObfuscatedEmpire
  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
  ☆228Updated 7 years ago
• hatRiot / token-priv
  Token Privilege Research
  ☆799Updated 7 years ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆293Updated 3 years ago
• matterpreter / Shhmon
  Neutering Sysmon via driver unload
  ☆225Updated 2 years ago
• enigma0x3 / Misc-PowerShell-Stuff
  random powershell goodness
  ☆441Updated 2 months ago
• ramen0x3f / AggressorScripts
  ☆272Updated 2 years ago
• christophetd / spoofing-office-macro
  PoC of a VBA macro spawning a process with a spoofed parent and command line.
  ☆378Updated 4 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆256Updated 6 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆231Updated 2 years ago
• paranoidninja / Pandoras-Box
  This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I ge…
  ☆350Updated 6 years ago