☆60Apr 30, 2025Updated last year
Alternatives and similar repositories for LSASS-Forked-Dump---Bypass-EDR-CrowdStrike
Users that are interested in LSASS-Forked-Dump---Bypass-EDR-CrowdStrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Takes a raw shellcode file (or a hex string) and produces a standalone .exe☆13May 29, 2026Updated 5 months ago
- Ghosting-AMSI☆252Apr 24, 2025Updated last year
- PEN-300 collection to help you on your exam.☆14Apr 19, 2022Updated 4 years ago
- Reflective DLL loader.☆27Jun 30, 2026Updated 4 months ago
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 11 months ago
- Early cascade injection PoC based on Outflanks blog post written in Rust☆68Dec 26, 2025Updated 10 months ago
- Help red teams find opsec processes during engagements☆45Dec 7, 2024Updated last year
- Fairy Law - Compromise or disable EDR security solutions☆80Dec 1, 2025Updated 11 months ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆26Mar 4, 2026Updated 8 months ago
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆229Nov 23, 2023Updated 2 years ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆26Aug 13, 2026Updated 2 months ago
- Red teaming tool to dump LSASS memory, bypassing basic countermeasures.☆247Aug 2, 2026Updated 3 months ago
- A Cobalt Strike RL built with Crystal Palac; module overloading, NtContinue entry transfer, call stack spoofing, sleep masking, and stati…☆271Mar 15, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 4, 2026Updated 3 months ago
- Windows anti-forensics made easy☆11Mar 6, 2024Updated 2 years ago
- Evasive loader to bypass static detection☆58Jan 15, 2024Updated 2 years ago
- command control framework☆38Nov 3, 2026Updated last week
- Evasive loader for .NET Framework assemblies☆53May 14, 2026Updated 5 months ago
- ☆52Jun 12, 2026Updated 5 months ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆204Apr 21, 2025Updated last year
- Adjusted version of the impacket-dcomexec script to work against Windows 10☆19Oct 13, 2025Updated last year
- lsassdump via RtlCreateProcessReflection and NanoDump☆85Oct 18, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆118Jan 26, 2026Updated 9 months ago
- Context-aware Nmap reconnaissance framework with traffic intelligence and AD awareness☆25Feb 4, 2026Updated 9 months ago
- Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.☆200Dec 23, 2025Updated 10 months ago
- Nim Shellcode Injector☆15Jan 24, 2021Updated 5 years ago
- Enumerate active EDR's on the system☆155Sep 23, 2025Updated last year
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- psexecsvc - a python implementation of PSExec's native service implementation☆319Mar 24, 2026Updated 7 months ago
- ☆30Aug 11, 2025Updated last year
- AppLocker-Based EDR Neutralization☆350Dec 19, 2025Updated 10 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Shellcode Loader using indirect syscalls☆16Jan 21, 2024Updated 2 years ago
- Makes `adb logcat` colored and adds the feature of being able to filter by app or keywords.☆15Aug 20, 2025Updated last year
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆15Feb 13, 2024Updated 2 years ago
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- A stealthier approach to WMI-based command execution using Impacket without touching the disk.☆88Mar 15, 2026Updated 7 months ago
- ☆100Sep 1, 2024Updated 2 years ago
- ☆122Oct 21, 2026Updated 3 weeks ago
Are these results useful?