Alternatives and similar repositories for AMSI-Bypass-HWBP

Users that are interested in AMSI-Bypass-HWBP are comparing it to the libraries listed below

• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated last month
• kapellos / VladimiRED
  ☆18Updated 5 months ago
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆33Updated last year
• xelemental / Mal-LNK-Generator
  ☆34Updated 2 months ago
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆39Updated 10 months ago
• 0xB455 / ActiveSyncBruter
  ☆24Updated 2 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆41Updated 6 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆40Updated last year
• HulkOperator / AuthStager
  ☆55Updated 7 months ago
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆45Updated last year
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆25Updated 2 months ago
• EspressoCake / ADIDNS_Parser
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Updated 3 months ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated 10 months ago
• affix / rusty-hollow
  Unix Process hollowing in rust
  ☆22Updated 5 months ago
• OtterHacker / AWSRoundRobin
  ☆38Updated 3 months ago
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆28Updated 3 months ago
• OtterHacker / Cerbere
  ☆48Updated 2 years ago
• a7t0fwa7 / SymProcSleuth
  A pure C version of SymProcAddress
  ☆27Updated last year
• Teach2Breach / rpeloader
  use python on windows with full submodule support without installation
  ☆28Updated 4 months ago
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 8 months ago
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆40Updated 6 months ago
• D4rthMaulCop / DumpKernel-S1
  A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80
  ☆20Updated last month
• synacktiv / AADOutsider-py
  Python3 rewrite of AsOutsider features of AADInternals
  ☆47Updated 5 months ago
• n0tspam / RunspaceLoader
  Launches a limited shell using PowerShell Runspaces with an optional AMSI Bypass. Does not invoke Powershell.exe
  ☆13Updated last year
• Offensive-Panda / .NET_PROFILER_DLL_LOADING
  .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…
  ☆42Updated 10 months ago
• casp3r0x0 / CortexRansomBypass
  Cortex EDR Ransomware protection Bypass
  ☆24Updated 3 months ago
• 0xRedpoll / ludus_mythic_teamserver
  Ludus role for deploying a Mythic Teamserver onto Linux servers
  ☆14Updated 2 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆31Updated last year
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆47Updated last month