Alternatives and similar repositories for LsassDumpReflectiveDll

Users that are interested in LsassDumpReflectiveDll are comparing it to the libraries listed below

• codewhitesec / daphne
  Proof-of-Concept to evade auditd by tampering via ptrace
  ☆18Updated 2 years ago
• D4rthMaulCop / DarthNetLoader
  ☆15Updated 2 years ago
• Flangvik / collector
  Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.
  ☆19Updated 3 years ago
• Adepts-Of-0xCC / SnoopyOwl
  ☆48Updated 4 years ago
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆33Updated 3 years ago
• waleedassar / SyscallNumberExtractor
  ☆24Updated 4 years ago
• audibleblink / davil
  leaking net-ntlm with webdav
  ☆26Updated 4 years ago
• mdsecactivebreach / SharpAltiris
  ☆25Updated 3 years ago
• HackingThings / SuperSneakyExec
  Loading and executing shellcode in C# without PInvoke.
  ☆22Updated 3 years ago
• attl4s / freeMetsrvLoader
  freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package
  ☆35Updated 2 years ago
• Allevon412 / BreadBear
  A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/
  ☆31Updated last year
• xenoscr / compressedCredBandit
  A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.
  ☆19Updated 4 years ago
• sk3w / beacon-object-files
  Miscellaneous examples for use with Cobalt Strike Beacon
  ☆10Updated 5 years ago
• nettitude / SyscallsExtractor
  ☆23Updated 3 years ago
• malcomvetter / TLAD
  The Totally Legit Authentication Dialog
  ☆12Updated 2 years ago
• paranoidninja / DotNetTracer
  C code to enable ETW tracing for Dotnet Assemblies
  ☆32Updated 3 years ago
• mobdk / WinSpoof
  Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code
  ☆24Updated 2 years ago
• Apr4h / GetInjectedThreads
  C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
  ☆54Updated 4 years ago
• xenoscr / SharpMailBOF
  A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.
  ☆15Updated 4 years ago
• OffenseTeacher / NimSkrull
  NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…
  ☆13Updated 2 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• ZeroPointSecurity / Domain-Enumeration-Tool
  Perform Windows domain enumeration via LDAP
  ☆37Updated 3 years ago
• X-C3LL / wfp-reader
  Proof of concept - Covert Channel using Windows Filtering Platform (C#)
  ☆21Updated 4 years ago
• R-Secure / AMSI-Bypasses
  This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…
  ☆24Updated 3 years ago
• bufferbandit / silent_cleanup_uac_bypass
  Silent Cleanup UAC Bypass POC
  ☆11Updated 5 years ago
• mgeeky / unhook-bof
  Remove API hooks from a Beacon process.
  ☆14Updated 4 years ago
• oldboy21 / CGPL
  Yet, Another Packer/Loader
  ☆25Updated 2 years ago
• NorthwaveSecurity / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆30Updated 2 years ago
• ThunderGunExpress / ThunderMSI
  ☆28Updated 7 years ago
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆26Updated 2 years ago