Alternatives and similar repositories for WordAmsiBypass

Users that are interested in WordAmsiBypass are comparing it to the libraries listed below

• rvrsh3ll / Sharp-Suite
  My musings with C#
  ☆28Updated 2 years ago
• 0xthirteen / PowerView3-Aggressor
  Cobalt Strike Aggressor script menu for Powerview/SharpView
  ☆28Updated 6 years ago
• xan7r / Misc
  ☆46Updated 3 years ago
• rvrsh3ll / SharpExcel4-DCOM
  Port of Invoke-Excel4DCOM
  ☆105Updated 5 years ago
• secgroundzero / tetanus
  Helper script for mangling CS payloads
  ☆51Updated 6 years ago
• vysecurity / FSharp-Shellcode
  F# Implementation to spawn shellcode
  ☆47Updated 7 years ago
• S3cur3Th1sSh1t / SharpPolarBear
  Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069
  ☆36Updated 5 years ago
• ThunderGunExpress / Thunder_Woosus
  ☆41Updated 6 years ago
• slyd0g / SharpRoast-Parser
  Bash one-liner that will parse harmj0y's SharpRoast or Rebeus kerberoast into hashcat crack-able format.
  ☆32Updated 6 years ago
• sussurro / BetterTorch
  A more obfuscated CactusTorch targeted towards office
  ☆32Updated 4 years ago
• checkymander / CoreSploit
  Initial Commit of Coresploit
  ☆56Updated 3 years ago
• anthemtotheego / SharpNado
  ☆70Updated 6 years ago
• rasta-mouse / CollectorService
  ☆54Updated 6 years ago
• vysecurity / AzureAppC2
  A script that can be deployed to Azure App for C2 / Proxy / Redirector
  ☆37Updated 6 years ago
• djhohnstein / SharpSC
  Simple .NET assembly to interact with services.
  ☆40Updated 5 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆53Updated 6 years ago
• djhohnstein / TSMSISrv_poc
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆58Updated 6 years ago
• curi0usJack / rubeus2ccache
  Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.
  ☆66Updated 4 years ago
• decoder-it / BadBackupOperator
  ☆37Updated 7 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• med0x2e / genxlm
  A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…
  ☆91Updated 5 years ago
• alfarom256 / ExternalC2Go
  ☆16Updated 5 years ago
• rasta-mouse / GadgetToJScript
  A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …
  ☆85Updated 5 years ago
• rvrsh3ll / SharpFruit
  A C# penetration testing tool to discover low-haning web fruit via web requests.
  ☆91Updated 3 years ago
• mitchmoser / AtYourService
  Service Enumeration C# .NET Assembly
  ☆58Updated 3 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆23Updated 5 years ago
• TheWover / donut-demos
  Demos of Donut used in conferences, etc. Mostly for my use, but free for others to use as a reference.
  ☆32Updated 5 years ago
• dmchell / Sniper
  A simple proof of concept for detecting use of Cobalt Strike's execute-assembly
  ☆61Updated 3 years ago
• checkymander / Forerunner
  Automation Engine using the Covenant API and lua scripting
  ☆24Updated 2 years ago
• icebearfriend / deckbuilder
  Cobalt Strike cna script for randomized argument spoofing
  ☆52Updated 6 years ago