Alternatives and similar repositories for dumping_lsass

Users that are interested in dumping_lsass are comparing it to the libraries listed below

• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆90Updated last month
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆177Updated 4 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆168Updated 5 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆155Updated 2 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆122Updated 3 months ago
• stevenyu113228 / BloodHound-MCP
  ☆153Updated 6 months ago
• LeighlinRamsay / GunnerC2
  ☆85Updated last week
• synacktiv / GroupPolicyBackdoor
  Group Policy Objects manipulation and exploitation framework
  ☆251Updated last month
• SpecterOps / MSSQLHound
  PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph
  ☆245Updated 3 weeks ago
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆267Updated 5 months ago
• Hacker-Hermanos / C2_INFRA_WORKSHOP_DEFCON32_RED_TEAM_VILLAGE
  C2 Infrastructure Automation
  ☆111Updated 3 months ago
• Friends-Security / SharpExclusionFinder
  Tool designed to find folder exclusions using Windows Defender using command line utility MpCmdRun.exe as a low privileged user, without …
  ☆217Updated 11 months ago
• BlackSnufkin / Invoke-DumpMDEConfig
  PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges requir…
  ☆152Updated last year
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆265Updated 10 months ago
• ShutdownRepo / dcshadow
  Python alternative to Mimikatz lsadump::dcshadow
  ☆153Updated 3 months ago
• wariv / DarkLnk
  Build sneaky & malicious LNK files.
  ☆146Updated 2 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆164Updated 9 months ago
• cybersectroll / TrollAMSI
  ☆182Updated 3 months ago
• TheManticoreProject / Delegations
  A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active …
  ☆208Updated 3 months ago
• cybrly / badsuccessor
  ☆113Updated 4 months ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆186Updated last year
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆153Updated 8 months ago
• trustedsec / specula
  ☆212Updated 3 months ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆267Updated 3 months ago
• badsectorlabs / ludus_adaptix_c2
  An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts
  ☆167Updated 4 months ago
• 0xflux / Wyrm
  The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.
  ☆79Updated this week
• CICADA8-Research / Penetration
  Our Tips&Tricks
  ☆126Updated 7 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆218Updated 5 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆208Updated 11 months ago