Alternatives and similar repositories for Throwback:

Users that are interested in Throwback are comparing it to the libraries listed below

• silentbreaksec / ThrowbackLP
  Listening Post for Throwback Implant
  ☆110Updated 9 years ago
• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆319Updated 7 years ago
• cobbr / ObfuscatedEmpire
  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
  ☆227Updated 7 years ago
• FSecureLABS / XRulez
  A command line tool for creating malicious outlook rules
  ☆161Updated 6 years ago
• FSecureLABS / wePWNise
  WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…
  ☆352Updated 6 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• trustedsec / spraywmi
  SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on …
  ☆253Updated 9 years ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆294Updated 4 years ago
• RedSiege / WMIOps
  This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
  ☆381Updated 8 months ago
• mdsecactivebreach / PowerDNS
  PowerDNS: Powershell DNS Delivery
  ☆211Updated 6 years ago
• pwndizzle / CodeExecutionOnWindows
  A list of ways to execute code on Windows using legitimate Windows tools
  ☆305Updated 5 years ago
• two06 / Inception
  Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  ☆368Updated last year
• 0xbadjuju / WheresMyImplant
  A Bring Your Own Land Toolkit that Doubles as a WMI Provider
  ☆285Updated 6 years ago
• mdsecresearch / Publications
  A list of published research documents
  ☆241Updated 8 months ago
• hegusung / AVSignSeek
  Tool written in python3 to determine where the AV signature is located in a binary/payload
  ☆313Updated 6 years ago
• mattifestation / WMI_Backdoor
  A PoC WMI backdoor presented at Black Hat 2015
  ☆273Updated 9 years ago
• EmpireProject / PSInject
  Inject PowerShell into any process
  ☆225Updated 6 years ago
• secretsquirrel / fido
  Teaching old shellcode new tricks
  ☆205Updated 7 years ago
• Cybereason / Invoke-WMILM
  ☆229Updated 6 years ago
• danielbohannon / Out-FINcodedCommand
  POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…
  ☆103Updated 7 years ago
• breenmachine / dnsftp
  Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.
  ☆209Updated 9 years ago
• OneLogicalMyth / zeroday-powershell
  A PowerShell example of the Windows zero day priv esc
  ☆324Updated 6 years ago
• enigma0x3 / Invoke-AltDSBackdoor
  ☆120Updated 9 years ago
• sensepost / liniaal
  Liniaal - A communication extension to Ruler
  ☆97Updated 6 years ago
• leechristensen / UnmanagedPowerShell
  Executes PowerShell from an unmanaged process
  ☆484Updated 9 years ago
• xorrior / RemoteRecon
  Remote Recon and Collection
  ☆448Updated 7 years ago
• BorjaMerino / Pazuzu
  Pazuzu: Reflective DLL to run binaries from memory
  ☆214Updated 4 years ago
• ramen0x3f / AggressorScripts
  ☆272Updated 2 years ago
• cobbr / PSAmsi
  PSAmsi is a tool for auditing and defeating AMSI signatures.
  ☆389Updated 6 years ago
• Kevin-Robertson / Tater
  Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec
  ☆451Updated 8 years ago