PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus YARA, entropy, string, and PE/imphash analysis. Companion to OffsetScan.
☆85Jul 28, 2026Updated 3 months ago
Alternatives and similar repositories for OffsetInspect
Users that are interested in OffsetInspect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- abusing windows toast notifications for fun and user manipulation☆107Jul 11, 2026Updated 3 months ago
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- Locate dlls and function addresses without PEB Walk and EAT parsing☆111Nov 7, 2025Updated 11 months ago
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆131Dec 7, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- WasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.☆134Jun 24, 2026Updated 4 months ago
- shellcode transformation tool for YARA evasion☆65Sep 20, 2026Updated last month
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- Evade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.☆149Dec 8, 2025Updated 10 months ago
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆91Jun 24, 2026Updated 4 months ago
- M365 Conditional Access Policy Bypass OST (Offensive Tooling)☆50Apr 22, 2026Updated 6 months ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Python scripts that helps in the development of PPKG binaries☆14Jul 31, 2026Updated 2 months ago
- Python tool to automatically perform SPN-less RBCD attacks.☆132Jan 7, 2026Updated 9 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆77Oct 23, 2026Updated last week
- A C# PE loader for x64 and x86 PE files.☆56Mar 9, 2026Updated 7 months ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆29May 21, 2026Updated 5 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆500Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆30Jul 24, 2026Updated 3 months ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 2 weeks ago
- The Azure Execution Tool☆158Feb 6, 2026Updated 8 months ago
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆295Jun 22, 2026Updated 4 months ago
- Commandline spoofing on Windows☆99Jul 19, 2026Updated 3 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆111Oct 11, 2026Updated 2 weeks ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆98Jul 3, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- ☆89Feb 12, 2026Updated 8 months ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆103Jul 1, 2026Updated 3 months ago
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆221Jan 6, 2026Updated 9 months ago
- Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py an…☆38Sep 11, 2026Updated last month
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆152Updated this week
- A BOF that's a BOF Loader and more☆212Apr 6, 2026Updated 6 months ago