Alternatives and similar repositories for msiscan

Users that are interested in msiscan are comparing it to the libraries listed below

• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆123Updated last year
• SafeBreach-Labs / CortexVortex
  ☆80Updated last year
• morRubin / NegoExRelay
  ☆88Updated 3 years ago
• decoder-it / ChgPass
  ☆137Updated last year
• synacktiv / AADOutsider-py
  Python3 rewrite of AsOutsider features of AADInternals
  ☆59Updated 6 months ago
• kapellos / LNKSmuggler
  A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.
  ☆92Updated last year
• xpn / CloudInject
  ☆118Updated last year
• joe-desimone / rep-research
  ☆79Updated last year
• sidaf / moonshine
  ☆70Updated 2 years ago
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆80Updated 2 years ago
• fin3ss3g0d / NativeThreadpool
  Work, timer, and wait callback example using solely Native Windows APIs.
  ☆88Updated 2 years ago
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆42Updated 4 months ago
• zyn3rgy / ClickonceHunter
  Golang search engine scraper intended for identification of published ClickOnce deployments
  ☆93Updated last year
• p0dalirius / FindProcessesWithNamedPipes
  A simple C++ Windows tool to get information about processes exposing named pipes.
  ☆40Updated 11 months ago
• 0xsp-SRD / 0xsp.com
  a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab
  ☆64Updated last year
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆107Updated last year
• nickvourd / Rocabella
  Sniffing files generator
  ☆61Updated 11 months ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆94Updated last year
• outflanknl / regcertipy
  Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does
  ☆94Updated 7 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆148Updated 2 years ago
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆111Updated 2 years ago
• Bl4ckM1rror / PEAs
  ☆61Updated 2 years ago
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆102Updated 2 years ago
• sevagas / Advanced_Initial_access_in_2024_OffensiveX
  Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
  ☆146Updated last year
• mgeeky / msi-shenanigans
  Proof of Concept code and samples presenting emerging threat of MSI installer files.
  ☆90Updated 3 years ago
• cube0x0 / YubiKey-Relay
  ☆68Updated 3 years ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 6 months ago
• felmoltor / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆32Updated 11 months ago
• skelsec / adiskreader
  Async Python library to parse local and remote disk images.
  ☆82Updated 7 months ago