Alternatives and similar repositories for PSMemory:

Users that are interested in PSMemory are comparing it to the libraries listed below

• SecurityJosh / MuteSysmon
  A PowerShell script to prevent Sysmon from writing its events
  ☆15Updated 4 years ago
• shantanu561993 / heroku-reverse-proxy
  Spin up a reverse proxy quickly on Heroku
  ☆13Updated 4 years ago
• LaresLLC / AzureTokenExtractor
  Extracts Azure authentication tokens from PowerShell process minidumps.
  ☆23Updated last year
• freshness79 / unlock
  Microsoft Applocker evasion tool
  ☆38Updated 5 years ago
• djhohnstein / CSharpCreateThreadExample
  C# code to run PIC using CreateThread
  ☆16Updated 5 years ago
• malcomvetter / ChromePasswords
  ☆20Updated 6 years ago
• NVISOsecurity / cobalt-strike-notifier
  ☆13Updated 3 years ago
• TarlogicSecurity / sepriv
  Tool to manage user privileges
  ☆28Updated 5 years ago
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 3 years ago
• limbenjamin / LogServiceCrash
  POC code to crash Windows Event Logger Service
  ☆26Updated 4 years ago
• hausec / CobaltStrikeToGhostWriter
  Log converter from CS log to Ghostwriter CSV
  ☆29Updated 4 years ago
• S3cur3Th1sSh1t / SharpByeBear
  AppXSVC Service race condition - privilege escalation
  ☆27Updated 5 years ago
• two06 / EvtMute
  Apply a filter to the events being reported by windows event logging
  ☆15Updated 4 years ago
• rmdavy / AmsiPEBWalkVBAx64
  ☆14Updated 4 years ago
• infosecn1nja / e2modrewrite
  Convert Empire profiles to Apache mod_rewrite scripts
  ☆27Updated 5 years ago
• G0ldenGunSec / wmiServSessEnum
  .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems
  ☆33Updated 5 years ago
• tevora-threat / c2_reporter
  Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials
  ☆20Updated 4 years ago
• 001SPARTaN / SaltedCaramel
  Apfell implant written in C#.
  ☆8Updated 4 years ago
• xenoscr / offsecops-shared-library
  A collection of scripts used to support an OffSecOps pipeline.
  ☆14Updated 4 years ago
• hausec / Set-RBCDBytes
  ☆16Updated 4 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆22Updated 4 years ago
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆26Updated 4 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 4 years ago
• sourcefrenchy / cryptopayload
  module for certexfil
  ☆15Updated 2 years ago
• NotMedic / SocksLauncher
  ☆14Updated 5 years ago
• misterch0c / BeaconTelegram
  Send message on Telegram when you get a new Cobalt Strike beacon
  ☆21Updated 5 years ago
• kyleavery / scarecrow_wrapper
  ☆36Updated 3 years ago
• leonjza / tc2
  treafik fronted c2 examples
  ☆26Updated 4 years ago
• xenoscr / compressedCredBandit
  A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.
  ☆18Updated 3 years ago
• jfmaes / CMDLL
  the most basic DLL ever to pop a cmd.
  ☆23Updated 4 years ago