Alternatives and similar repositories for CarbonMonoxide

Users that are interested in CarbonMonoxide are comparing it to the libraries listed below

• ASkyeye / CobaltPatch
  Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…
  ☆40Updated 4 years ago
• jnqpblc / SharpDir
  SharpDir is a simple code set to search both local and remote file systems for files and is compatible with Cobalt Strike.
  ☆27Updated 5 years ago
• timwhitez / JmpUnhook
  Ntdll Unhooking POC
  ☆19Updated 2 years ago
• audibleblink / xordump
  ☆18Updated 3 years ago
• CUHKJason / BOF-klist
  A simple BOF implementation of klist using Windows API
  ☆32Updated 2 years ago
• Kudaes / Scripts
  Repository for dirty scripts and PoCs
  ☆17Updated 3 months ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆48Updated 3 years ago
• TomOS3 / UserModeUnhooking
  This project is created for research into antivirus evasion by unhooking.
  ☆15Updated 3 years ago
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• Gr1mmie / SharpShellCodeObfus
  Caeser Cipher your shellcode!
  ☆20Updated 3 years ago
• rsmudge / CVE-2020-0796-BOF
  ☆70Updated 4 years ago
• mobdk / Core
  Core bypass Windows Defender and execute any binary converted to shellcode
  ☆43Updated 3 years ago
• kartikdurg / Enum-LSASS
  LSASS enumeration like pypykatz written in C-Lang
  ☆20Updated 3 years ago
• BOFs / BOFs
  Beacon Object Files.
  ☆35Updated last year
• xx0hcd / Alt-Beacon-Payload
  Beacon payload using AV bypass method from https://github.com/fullmetalcache/CsharpMMNiceness and shellcode generated from https://github…
  ☆20Updated 4 years ago
• moloch-- / DarkLoadLibrary
  LoadLibrary for offensive operations
  ☆33Updated 3 years ago
• 0xC01DF00D / Mimigoatz
  Alternative Mimikatz LSASS DUMPER
  ☆12Updated 5 years ago
• fashionproof / CheckSafeBoot
  I used this to see if an EDR is running in Safe Mode
  ☆37Updated 4 years ago
• 0x3rhy / GetClipboard
  Cobalt Strike Get clipboard plugin
  ☆14Updated last year
• WingsOfDoom / ICU
  quick 'n dirty poc based on PoC windows auth prompt in c# based on https://gist.githubusercontent.com/mayuki/339952/raw/2c36b735bc51861a3…
  ☆31Updated 4 years ago
• RedCursorSecurityConsulting / SharpHashSpray
  An execute-assembly compatible tool for spraying local admin hashes on an Active Directory domain.
  ☆18Updated 4 years ago
• EncodeGroup / SharpDirLister
  .NET 4.0 Fast Directory / File Lister
  ☆26Updated 4 years ago
• jnqpblc / SharpReg
  SharpReg is a simple code set to interact with the Remote Registry service api and is compatible with Cobalt Strike.
  ☆29Updated 5 years ago
• hack2fun / EventLogBypass
  Terminate the eventlog thread to disable the windows eventlog
  ☆20Updated 5 years ago
• sliverarmory / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆51Updated 3 years ago
• tothi / PowerLessShell
  Run PowerShell command without invoking powershell.exe
  ☆35Updated 3 years ago
• xforcered / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆54Updated 3 years ago
• crawl3r / FunWithAMSI
  A repo to hold any bypasses I work on/study/whatever
  ☆19Updated 4 years ago
• timwhitez / Freeze-Common
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆14Updated 2 years ago
• optiv / CVE-2020-15931
  Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability
  ☆26Updated 4 years ago