Alternatives and similar repositories for cornershot:

Users that are interested in cornershot are comparing it to the libraries listed below

• improsec / SharpEventPersist
  Persistence by writing/reading shellcode from Event Log
  ☆371Updated 2 years ago
• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆275Updated 3 years ago
• nettitude / SharpWSUS
  ☆452Updated 2 years ago
• optiv / Registry-Recon
  Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon
  ☆325Updated 2 years ago
• Cobalt-Strike / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆209Updated last month
• Flangvik / AzureC2Relay
  AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…
  ☆220Updated 4 years ago
• dirkjanm / forest-trust-tools
  Proof-of-concept tools for my AD Forest trust research
  ☆208Updated 10 months ago
• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆231Updated 2 years ago
• ly4k / PetitPotam
  Python implementation for PetitPotam
  ☆196Updated 3 years ago
• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆439Updated last year
• hausec / ProxyLogon
  ☆293Updated 9 months ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆288Updated 3 years ago
• outflanknl / Spray-AD
  A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.
  ☆436Updated 3 years ago
• api0cradle / CVE-2023-23397-POC-Powershell
  ☆344Updated 2 years ago
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆302Updated last year
• S3cur3Th1sSh1t / MultiPotato
  ☆518Updated 3 years ago
• mitchmoser / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆351Updated 3 years ago
• BC-SECURITY / Malleable-C2-Profiles
  Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.
  ☆361Updated last year
• busterb / msmailprobe
  Office 365 and Exchange Enumeration
  ☆187Updated 5 years ago
• N7WEra / BofAllTheThings
  Creating a repository with all public Beacon Object Files (BoFs)
  ☆480Updated last year
• VbScrub / Rubeus-GUI
  GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements
  ☆181Updated 3 years ago
• Yaxser / CobaltStrike-BOF
  Collection of beacon BOF written to learn windows and cobaltstrike
  ☆347Updated 2 years ago
• pwn1sher / WMEye
  WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
  ☆365Updated 3 years ago
• codewhitesec / HandleKatz
  PIC lsass dumper using cloned handles
  ☆583Updated 2 years ago
• iomoath / PowerShx
  Run Powershell without software restrictions.
  ☆286Updated 3 years ago
• mandiant / ADFSpoof
  ☆391Updated 8 months ago
• 0xthirteen / StayKit
  Cobalt Strike kit for Persistence
  ☆475Updated 5 years ago
• eksperience / KnockOutlook
  A little tool to play with Outlook
  ☆206Updated 3 years ago
• mpgn / BackupOperatorToDA
  From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller
  ☆421Updated 3 months ago
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆455Updated 2 years ago