Alternatives and similar repositories for GodPotato-Aggressor-Script:

Users that are interested in GodPotato-Aggressor-Script are comparing it to the libraries listed below

• LuemmelSec / ntlmrelayx.py_to_exe
  ☆78Updated last year
• werdhaihai / SharpAltShellCodeExec
  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
  ☆76Updated last year
• rasta-mouse / SCMUACBypass
  ☆95Updated last year
• Tw1sm / SQL-BOF
  Library of BOFs to interact with SQL servers
  ☆157Updated 2 months ago
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆114Updated last year
• Octoberfest7 / CVE-2023-36874_BOF
  Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
  ☆204Updated last year
• ice-wzl / wmiexec2
  wmiexec2.0 is the same wmiexec that everyone knows and loves (debatable). This 2.0 version is obfuscated to avoid well known signatures …
  ☆33Updated 8 months ago
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆97Updated last year
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆149Updated last year
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆199Updated last year
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆112Updated last year
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆92Updated last year
• trustedsec / PPLFaultDumpBOF
  ☆138Updated last year
• Mr-Un1k0d3r / Elevate-System-Trusted-BOF
  ☆150Updated last year
• EspressoCake / Defender-Exclusions-Creator-BOF
  ☆78Updated last year
• c3r3br4t3 / ShadowRDP
  ☆63Updated last year
• Octoberfest7 / CS_Uploads_Tracker
  Aggressor script add-in for CobaltStrike to track file uploads
  ☆36Updated 2 years ago
• v1k1ngfr / fuegoshell
  Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445
  ☆41Updated 9 months ago
• puzzlepeaches / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆35Updated last year
• Leo4j / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆44Updated last month
• magnusstubman / tokenduplicator
  Tool to start processes as SYSTEM using token duplication
  ☆38Updated 4 years ago
• Leo4j / SessionExec
  Execute commands in other Sessions
  ☆84Updated 6 months ago
• Haunted-Banshee / ErebusGate
  ErebusGate for Nim Bypass AV/EDR
  ☆161Updated 2 years ago
• WafflesExploits / CobaltStrike-YARA-Bypass-f0b627fc
  Repository of scripts from my blog post on bypassing the YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellco…
  ☆29Updated 4 months ago
• decoder-it / ADCSCoercePotato
  ☆220Updated 9 months ago
• sfewer-r7 / CVE-2023-27532
  Exploit for CVE-2023-27532 against Veeam Backup & Replication
  ☆106Updated last year
• nopbrick / SeeProxy
  Golang reverse proxy with CobaltStrike malleable profile validation.
  ☆108Updated 2 years ago
• W01fh4cker / MemshellKit
  针对多个框架的高度自定义的内存马一键打入工具 | A highly customized memory shell one-click injection tool for multiple frameworks
  ☆47Updated last year
• OG-Sadpanda / SharpSword
  Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly
  ☆117Updated 4 months ago
• susMdT / SharpAgent
  C# havoc implant
  ☆97Updated 2 years ago