Alternatives and similar repositories for xPipe:

Users that are interested in xPipe are comparing it to the libraries listed below

• kartikdurg / Enum-LSASS
  LSASS enumeration like pypykatz written in C-Lang
  ☆20Updated 3 years ago
• S3cur3Th1sSh1t / LDAP-Signing-Scanner
  A little scanner to check the LDAP Signing state
  ☆46Updated 3 years ago
• bugch3ck / SharpLdapWhoami
  WhoAmI by asking the LDAP service on a domain controller.
  ☆61Updated 3 years ago
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆47Updated 3 years ago
• S3cur3Th1sSh1t / SharpOxidResolver
  IOXIDResolver from AirBus Security/PingCastle
  ☆47Updated 4 years ago
• xforcered / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆27Updated 3 years ago
• ausec-it / bof-registry
  Cobalt Strike beacon object file that allows you to query and make changes to the Windows Registry
  ☆26Updated 4 years ago
• zimawhit3 / DynimicGhostWriting
  Windows x64 Process Injection via Ghostwriting with Dynamic Configuration
  ☆28Updated 3 years ago
• Allevon412 / BreadBear
  A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/
  ☆31Updated last year
• KINGSABRI / DotNetToJScriptMini
  A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.
  ☆47Updated 4 years ago
• boku7 / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆76Updated 2 years ago
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 3 years ago
• Allevon412 / PPL_Sandboxer
  ☆81Updated 3 years ago
• nettitude / SyscallsExtractor
  ☆23Updated 3 years ago
• slyd0g / SharpCrashEventLog
  C# port of LogServiceCrash
  ☆47Updated 4 years ago
• invictus-0x90 / Docker-C3
  Example of running C3 (https://github.com/FSecureLABS/C3) in a Docker container
  ☆26Updated 3 years ago
• moloch-- / DarkLoadLibrary
  LoadLibrary for offensive operations
  ☆32Updated 3 years ago
• tothi / SharpStay
  .NET project for installing Persistence
  ☆64Updated 3 years ago
• CUHKJason / BOF-klist
  A simple BOF implementation of klist using Windows API
  ☆30Updated 2 years ago
• ASkyeye / CobaltPatch
  Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…
  ☆39Updated 4 years ago
• N4kedTurtle / LocalDllParse
  ☆55Updated 3 years ago
• thalpius / Microsoft-Defender-for-Identity-Encrypted-Password
  ☆35Updated 9 months ago
• tothi / PowerLessShell
  Run PowerShell command without invoking powershell.exe
  ☆35Updated 3 years ago
• xpn / AppProxyC2
  ☆67Updated 3 years ago
• blackarrowsec / Certify
  Active Directory certificate abuse.
  ☆37Updated 3 years ago
• EspressoCake / HandleKatz_BOF
  A BOF port of the research of @thefLinkk and @codewhitesec
  ☆97Updated 3 years ago
• jsecu / CredManBOF
  ☆92Updated 3 years ago
• mdsecactivebreach / SharpAltiris
  ☆24Updated 2 years ago