Alternatives and similar repositories for subTee-gits-backups

Users that are interested in subTee-gits-backups are comparing it to the libraries listed below

• S3cur3Th1sSh1t / LDAP-Signing-Scanner
  A little scanner to check the LDAP Signing state
  ☆46Updated 4 years ago
• RiccardoAncarani / TaskShell
  ☆59Updated 4 years ago
• rvrsh3ll / NoMSBuild
  MSBuild without MSbuild.exe
  ☆134Updated 5 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆146Updated 4 years ago
• Barbarisch / forkatz
  credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege
  ☆123Updated 4 years ago
• jfmaes / SharpNukeEventLog
  nuke that event log using some epic dinvoke fu
  ☆118Updated 4 years ago
• tothi / SharpStay
  .NET project for installing Persistence
  ☆63Updated 3 years ago
• xpn / AppProxyC2
  ☆70Updated 4 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆98Updated 3 years ago
• djhohnstein / TSMSISrv_poc
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆62Updated 6 years ago
• vivami / OutlookParasite
  Outlook persistence using VSTO add-ins
  ☆87Updated 4 years ago
• EspressoCake / Firewall_Walker_BOF
  A BOF to interact with COM objects associated with the Windows software firewall.
  ☆109Updated 4 years ago
• S3cur3Th1sSh1t / RDPThiefInject
  RDPThief donut shellcode inject into mstsc
  ☆88Updated 4 years ago
• ustayready / roguerdp
  ☆33Updated 3 years ago
• NotMedic / ArtifactKit
  ☆67Updated 3 years ago
• RiccardoAncarani / talks
  ☆43Updated 3 years ago
• VirtualAlllocEx / Taskschedule-Persistence-Download-Cradles
  Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged
  ☆88Updated 3 years ago
• jsecu / CredManBOF
  ☆98Updated 4 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆107Updated 5 years ago
• xforcered / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆53Updated 3 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆66Updated 5 years ago
• EspressoCake / BeaconDownloadSync
  ☆94Updated 3 years ago
• airzero24 / WMIReg
  PoC to interact with local/remote registry hives through WMI
  ☆87Updated 5 years ago
• xforcered / Detect-Hooks
  Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
  ☆105Updated 4 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆104Updated 3 years ago
• breakid / SharpUtils
  A collection of C# utilities intended to be used with Cobalt Strike's execute-assembly
  ☆46Updated 2 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆146Updated 4 years ago
• thiagomayllart / Harvis
  Harvis is designed to automate your C2 Infrastructure.
  ☆107Updated 3 years ago
• S3cur3Th1sSh1t / Get-System-Techniques
  ☆97Updated 3 years ago
• jfmaes / SharpLNKGen-UI
  UI for creating LNKs
  ☆105Updated 4 years ago