Alternatives and similar repositories for AMSI-Bypass-HWBP

Users that are interested in AMSI-Bypass-HWBP are comparing it to the libraries listed below

• HulkOperator / AuthStager
  ☆55Updated 8 months ago
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆35Updated 2 months ago
• Offensive-Panda / .NET_PROFILER_DLL_LOADING
  .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…
  ☆43Updated 11 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆41Updated 8 months ago
• 0xTriboulet / T-70
  A proof-of-concept shellcode loader that leverages AI/ML face recognition models to verify the identity of a user on a target system
  ☆39Updated 8 months ago
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year
• kapellos / VladimiRED
  ☆18Updated 6 months ago
• 0xB455 / ActiveSyncBruter
  ☆26Updated 4 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆40Updated last year
• affix / rusty-hollow
  Unix Process hollowing in rust
  ☆22Updated 6 months ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated last year
• mlcsec / SigFinder
  Identify binaries with Authenticode digital signatures signed to an internal CA/domain
  ☆40Updated last year
• Teach2Breach / rpeloader
  use python on windows with full submodule support without installation
  ☆29Updated 5 months ago
• casp3r0x0 / CortexRansomBypass
  Cortex EDR Ransomware protection Bypass
  ☆24Updated 5 months ago
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆25Updated 4 months ago
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆40Updated 11 months ago
• I3IT / Detect.Remote.ShadowSnapshot.Dump
  Detect Remote Local Credentials Dumping using a Shadow Snapshot
  ☆27Updated 5 months ago
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆33Updated last year
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆45Updated last year
• Patrick0x41 / BOF_All_Things
  Beacon Object Files (BOF) for Cobalt Strike.
  ☆31Updated 10 months ago
• redr0nin / CVE-2024-38143
  Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
  ☆23Updated 5 months ago
• SecTheBit / ZoomBotC2
  ☆34Updated last week
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 9 months ago
• Whitecat18 / earlycascade-injection
  Early cascade injection PoC based on Outflanks blog post written in Rust
  ☆54Updated 5 months ago
• cbwang505 / FilesystemEoPDesktopSystemShell
  Folder Or File Delete to Get System Shell on Current Session Desktop
  ☆40Updated 5 months ago
• 0xRedpoll / ludus_mythic_teamserver
  Ludus role for deploying a Mythic Teamserver onto Linux servers
  ☆14Updated 3 months ago
• vysecurity / ExfilServer
  Client-side Encrypted Upload Server Python Script
  ☆28Updated this week
• EspressoCake / ADIDNS_Parser
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Updated 4 months ago
• patrickt2017 / VEHNetLoader
  Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies
  ☆31Updated this week
• Zeyad-Azima / ShellcodeGenZ
  GenZ Shellcode Generator to execute commands with winExec API
  ☆20Updated 2 months ago