Alternatives and similar repositories for LonelyALPC-BypassUAC:

Users that are interested in LonelyALPC-BypassUAC are comparing it to the libraries listed below

• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆77Updated 4 years ago
• N4kedTurtle / HellsGatePoC
  ☆50Updated 4 years ago
• checkymander / CoreSploit
  Initial Commit of Coresploit
  ☆56Updated 3 years ago
• slyd0g / SK8RAT
  C++ implant that interfaces with a SK8PARK server
  ☆49Updated 3 years ago
• mdsecactivebreach / Browser-ExternalC2
  External C2 Using IE COM Objects
  ☆100Updated 6 years ago
• mitchmoser / SharPermission
  C# .NET Assembly for interacting with File Object DACLs
  ☆42Updated 5 years ago
• last-byte / HppDLL
  Source code for HppDLL - local password dumping using MsvpPasswordValidate hooks
  ☆4Updated 4 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆75Updated 5 years ago
• airzero24 / WMIReg
  PoC to interact with local/remote registry hives through WMI
  ☆85Updated 4 years ago
• mdsecactivebreach / Execute-GithubAssembly-Aggressor
  Aggressor Script to Execute Assemblies from Github
  ☆71Updated 4 years ago
• rasta-mouse / Fork-n-Run
  ☆70Updated 3 years ago
• tomcarver16 / AmsiHook
  AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.
  ☆64Updated 4 years ago
• Soledge / BlockEtw
  .Net Assembly to block ETW telemetry in current process
  ☆78Updated 4 years ago
• mez-0 / MoveScheduler
  .NET 4.0 Scheduled Job Lateral Movement
  ☆90Updated 4 years ago
• RythmStick / CVE-2019-1064
  CVE-2019-1064 Local Privilege Escalation Vulnerability
  ☆24Updated 5 years ago
• ewilded / PPID_spoof
  An example of how to spawn a process with a spoofed parent PID (Visual C++)
  ☆27Updated 6 years ago
• jfmaes / Backdoorplz
  adding a backdooruser using win32api
  ☆80Updated 4 years ago
• N4kedTurtle / ExecuteAssembly_Mailslot
  ☆38Updated 4 years ago
• crummie5 / Freshycalls_PoC
  A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯
  ☆40Updated 4 years ago
• thesnoom / extps-cobalt-strike-bof
  Extended Process List (Search functionality)
  ☆29Updated 4 years ago
• DamonMohammadbagher / Videos-BypassingAVsByCSharp
  Video files for eBook: "Bypassing AVs by C#.NET Programming"
  ☆41Updated last year
• crawl3r / FunWithAMSI
  A repo to hold any bypasses I work on/study/whatever
  ☆19Updated 4 years ago
• djhohnstein / TSMSISrv_poc
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆58Updated 6 years ago
• sailay1996 / SECOMN_EoP
  Sound Research SECOMN service Privilege Escalation (windows 10)
  ☆40Updated 5 years ago
• djhohnstein / CSharpSetThreadContext
  C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread
  ☆119Updated 6 years ago
• boku7 / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆77Updated 2 years ago
• n4ll3ec / AggressorSploit
  Collect & Optimize awesome CobaltStrike aggressor scripts, hope to create a All-In-One framework.
  ☆37Updated 5 years ago
• fashionproof / CheckSafeBoot
  I used this to see if an EDR is running in Safe Mode
  ☆36Updated 4 years ago
• xan7r / Misc
  ☆46Updated 3 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆74Updated 5 years ago