Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native executables.
☆284Feb 13, 2026Updated 8 months ago
Alternatives and similar repositories for Invoke-ArgFuscator
Users that are interested in Invoke-ArgFuscator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ArgFuscator.net is an open-source, stand-alone web application that helps generate obfuscated command lines for common system-native exec…☆428Feb 19, 2026Updated 8 months ago
- C# DInvoke Shellcode Runner☆31Feb 10, 2025Updated last year
- A PowerShell console in C/C++ with all the security features disabled☆399Oct 14, 2025Updated last year
- ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminatin…☆151Jan 15, 2025Updated last year
- Stealthily inject shellcode into an executable☆485Oct 19, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.☆433Sep 26, 2025Updated last year
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆315Dec 9, 2023Updated 2 years ago
- Weaponizing DCOM for NTLM Authentication Coercions☆217Nov 4, 2025Updated 11 months ago
- EDRSandblast-GodFault☆272Aug 28, 2023Updated 3 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year
- ForsHops☆157Mar 25, 2025Updated last year
- PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads☆256Oct 30, 2025Updated last year
- Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data☆431Oct 23, 2026Updated last week
- Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.☆751May 9, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Project for generating and identifying deceptive LNK files.☆397Aug 10, 2026Updated 2 months ago
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,561May 5, 2026Updated 5 months ago
- RunPE implementation with multiple evasive techniques (2)☆289Sep 25, 2025Updated last year
- This is the tool to dump the LSASS process on modern Windows 11☆680May 23, 2026Updated 5 months ago
- Automating the MITM attack on WSUS☆416Oct 18, 2026Updated 2 weeks ago
- Collect Windows telemetry for Maldev☆513Aug 14, 2026Updated 2 months ago
- An App Domain Manager Injection DLL PoC on steroids☆242Dec 14, 2023Updated 2 years ago
- Tool to enumerate privileged Scheduled Tasks on Remote Systems☆312Aug 29, 2026Updated 2 months ago
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆196May 31, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…☆1,237Jun 10, 2024Updated 2 years ago
- PowerShell implementation for AD CS☆163Jul 30, 2026Updated 3 months ago
- A Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTA…☆371Mar 17, 2026Updated 7 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆381Oct 26, 2026Updated last week
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆652May 8, 2025Updated last year
- Windows Session Hijacking via COM☆352Dec 13, 2025Updated 10 months ago
- Enumerate Domain Users Without Authentication☆312Apr 22, 2025Updated last year
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆348Jul 10, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PoC for Early Cascade process injection technique.☆221Jan 30, 2025Updated last year
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆442Sep 29, 2025Updated last year
- Ghosting-AMSI☆251Apr 24, 2025Updated last year
- Analyse your malware to surgically obfuscate it☆550Jun 27, 2026Updated 4 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆469Jun 27, 2025Updated last year
- Lab research on Windows loader internals, PE loading, stack artifacts, and execution tradeoffs.☆246May 4, 2026Updated 5 months ago
- ☆166May 5, 2025Updated last year