Alternatives and similar repositories for SAMDump

Users that are interested in SAMDump are comparing it to the libraries listed below

• atomiczsec / Adrenaline
  Collection of BOFs created for red team/adversary engagements. Created to be small and interchangeable, for quick recon or eventing.
  ☆228Updated this week
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆153Updated last year
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆154Updated 10 months ago
• Meowmycks / koneko
  Robust Cobalt Strike shellcode loader with multiple advanced evasion features
  ☆198Updated 9 months ago
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆121Updated 7 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆213Updated last year
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆190Updated last year
• ZephrFish / QoL-BOFs
  Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning
  ☆137Updated last month
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆175Updated 3 weeks ago
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆191Updated 10 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆152Updated this week
• NtDallas / BOF_ExecuteAssembly
  Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.
  ☆177Updated last month
• j3h4ck / WatchDogKiller
  PoC exploit for the vulnerable WatchDog Anti-Malware driver (amsdk.sys) – weaponized to kill protected EDR/AV processes via BYOVD.
  ☆180Updated 4 months ago
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆119Updated 2 years ago
• decoder-it / ADCSCoercePotato
  ☆240Updated last year
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆224Updated 2 years ago
• dmcxblue / SharpBlackout
  Terminate AV/EDR leveraging BYOVD attack
  ☆103Updated 10 months ago
• decoder-it / KrbRelayEx-RPC
  ☆198Updated 10 months ago
• entropy-z / Kharon
  Agent for AdaptixC2 with focus in evasion, capability and malleable.
  ☆133Updated this week
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS
  ☆150Updated 11 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆86Updated 2 months ago
• Ghost53574 / havoc_profile_generator
  Havoc C2 profile generator
  ☆102Updated 6 months ago
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆153Updated 5 months ago
• 7hePr0fess0r / ADCSDevilCOM
  A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …
  ☆163Updated 2 months ago
• TierZeroSecurity / teams-cookies-bof
  BOF to steal Teams cookies
  ☆123Updated 2 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆125Updated 2 years ago
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆167Updated 6 months ago
• m8sec / Dispatch
  Evasive Payload Delivery Server & C2 Redirector
  ☆112Updated 2 months ago
• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆128Updated last year
• M1ndo / WerDump
  A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass
  ☆164Updated 4 months ago