Alternatives and similar repositories for SharpScanner:

Users that are interested in SharpScanner are comparing it to the libraries listed below

• CCob / ProvisionAppx
  ☆37Updated 2 years ago
• rasta-mouse / PacketAlchemy
  Playing with packets in C#
  ☆14Updated 6 months ago
• plackyhacker / DynamicEarlyBird
  An example of using Dynamic Invoke to Inject Shellcode using the Early Bird Method.
  ☆11Updated last year
• mobdk / HideCode
  Hide code from dnSpy and other C# spying tools
  ☆41Updated 4 years ago
• leftp / BackupCreds
  A C# implementation of dumping credentials from Windows Credential Manager
  ☆56Updated last year
• tmenochet / PowerExec
  Offensive tool for fileless lateral movement on Windows networks
  ☆25Updated 9 months ago
• michaelweber / CSharpSourceObfuscator
  A C# Solution Source Obfuscator for avoiding AV signatures with minimal user interaction. Powered by the Roslyn C# library.
  ☆73Updated 4 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆50Updated 2 years ago
• Soledge / BlockEtw
  .Net Assembly to block ETW telemetry in current process
  ☆76Updated 4 years ago
• reznok / MemoryLoader
  A .NET binary loader that bypasses AMSI
  ☆44Updated 3 years ago
• usdAG / SharpLink
  Create file system symbolic links from low privileged user accounts within PowerShell
  ☆92Updated 2 years ago
• KINGSABRI / DotNetToJScriptMini
  A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.
  ☆47Updated 4 years ago
• ricardojoserf / SharpSelfDelete
  PoC to self-delete a binary in C#
  ☆30Updated last year
• Kara-4search / FullDLLUnhooking_CSharp
  Unhook DLL via cleaning the DLL 's .text section
  ☆9Updated 3 years ago
• mobdk / Sigma
  Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx
  ☆14Updated 3 years ago
• two06 / SharpShot
  Capture screenshots from .NET using .NET methods or Windows API calls
  ☆67Updated 4 years ago
• EspressoCake / Firewall_Walker_BOF
  A BOF to interact with COM objects associated with the Windows software firewall.
  ☆102Updated 3 years ago
• p3nt4 / RunDLL.Net
  Execute .Net assemblies using Rundll32.exe
  ☆110Updated 3 years ago
• TheWover / Manager
  Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
  ☆62Updated 5 years ago
• GetRektBoy724 / SharpHalos
  My implementation of Halo's Gate technique in C#
  ☆53Updated 2 years ago
• Shrfnt77 / AmsiBypass
  Bypassing Amsi using LdrLoadDll
  ☆37Updated last month
• netbiosX / GhostLoader
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆52Updated 4 years ago
• rasta-mouse / MinHook.NET
  A C# port of the MinHook API hooking library
  ☆52Updated 2 years ago
• badBounty / directInjectorPOC
  Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.
  ☆82Updated 5 years ago
• RedCursorSecurityConsulting / NTFSCopy
  NTFS parsing library in C#. Allows one to parse and read NTFS structures on disk.
  ☆27Updated 3 years ago
• ricardojoserf / SharpNado
  Repository to gather the .NET malware I will be developing
  ☆16Updated 3 months ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 3 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆40Updated 5 years ago
• leftp / SpoolSamplerNET
  Implementation of SpoolSample without rDLL
  ☆31Updated 4 years ago
• checkymander / sshiva
  C# application that allows you to quick run SSH commands against a host or list of hosts
  ☆42Updated 4 years ago