awesome-repositories.com
Blog
awesome-repositories.com

Entdecke die besten Open-Source-Repositories mit KI-gestützter Suche.

EntdeckenKuratierte SuchenOpen-Source-AlternativenSelf-hosted SoftwareBlogSitemap
ProjektÜber unsRanking-MethodikPresseMCP-Server
RechtlichesDatenschutzAGB
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
Back to fuzzysecurity/sharp-suite

Open-source alternatives to Sharp Suite

30 open-source projects similar to fuzzysecurity/sharp-suite, ranked by how many features they have in common. Compare stars, activity and what each one does to find the best Sharp Suite alternative.

  • lolbas-project/lolbasAvatar von LOLBAS-Project

    LOLBAS-Project/LOLBAS

    8,323Auf GitHub ansehen↗

    LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

    XSLTblueteamdfirliving-off-the-land
    Auf GitHub ansehen↗8,323
  • trustedsec/unicornAvatar von trustedsec

    trustedsec/unicorn

    3,917Auf GitHub ansehen↗

    Unicorn is a collection of utilities for generating malicious HTA files, VBA macros, encoded PowerShell commands, and memory-resident shellcode injection frameworks. It provides tools to create payloads designed to achieve remote code execution by bypassing security controls. The project focuses on weaponizing office documents through VBA macros and formulas, generating HTA attack vectors, and creating encoded PowerShell payloads. It includes a shellcode injection framework to wrap external shellcode for direct execution in system memory. The toolkit covers binary-to-base64 conversion for ce

    Python
    Auf GitHub ansehen↗3,917
  • 3xpl01tc0d3r/processinjectionAvatar von 3xpl01tc0d3r

    3xpl01tc0d3r/ProcessInjection

    1,248Auf GitHub ansehen↗

    This program is designed to demonstrate various process injection techniques

    C#
    Auf GitHub ansehen↗1,248
  • api0cradle/ultimateapplockerbypasslistAvatar von api0cradle

    api0cradle/UltimateAppLockerByPassList

    2,067Auf GitHub ansehen↗

    The goal of this repository is to document the most common techniques to bypass AppLocker.

    PowerShell
    Auf GitHub ansehen↗2,067

KI-Suche

Entdecke weitere awesome Repositories

Beschreibe in einfachen Worten, was du brauchst — die KI bewertet tausende kuratierte Open-Source-Projekte nach Relevanz.

Find more with AI search
  • aptortellini/undefenderAvatar von APTortellini

    APTortellini/unDefender

    360Auf GitHub ansehen↗

    unDefender is the C++ implementation of a technique originally described by @jonasLyk in this Twitter thread. At its core, this technique revolves around changing the \Device\BootDevice symbolic link in the Windows Object Manager so that when Defender's WdFilter driver is unloaded and loaded…

    C++
    Auf GitHub ansehen↗360
  • arno0x/shellcodewrapperA

    Arno0x/ShellcodeWrapper

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • bats3c/evtmuteAvatar von bats3c

    bats3c/EvtMute

    264Auf GitHub ansehen↗

    This is a tool that allows you to offensively use YARA to apply a filter to the events being reported by windows event logging.

    C#
    Auf GitHub ansehen↗264
  • djhohnstein/scatterbrainD

    djhohnstein/ScatterBrain

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • c-sto/bananaphoneC

    C-Sto/BananaPhone

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • ccob/sharpblockAvatar von CCob

    CCob/SharpBlock

    1,163Auf GitHub ansehen↗
    C#
    Auf GitHub ansehen↗1,163
  • cerbersec/killdefenderbofAvatar von Cerbersec

    Cerbersec/KillDefenderBOF

    236Auf GitHub ansehen↗

    KillDefenderBOF is a Beacon Object File PoC implementation of pwn1sher/KillDefender which is based on research by Gabriel Landau. The article can be found here.

    C
    Auf GitHub ansehen↗236
  • choisg/uuidshellcodeexecC

    ChoiSG/UuidShellcodeExec

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • cribdragg3r/alarisC

    cribdragg3r/Alaris

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • d00mfist/go4arunD

    D00MFist/Go4aRun

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • djhohnstein/csharpsetthreadcontextD

    djhohnstein/CSharpSetThreadContext

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • bats3c/darkloadlibraryAvatar von bats3c

    bats3c/DarkLoadLibrary

    1,180Auf GitHub ansehen↗

    LoadLibrary for offensive operations

    C
    Auf GitHub ansehen↗1,180
  • flangvik/netloaderAvatar von Flangvik

    Flangvik/NetLoader

    849Auf GitHub ansehen↗

    Loads any C# binary from filepath or url, patching AMSI and unhooks ETW

    C#
    Auf GitHub ansehen↗849
  • getrektboy724/sharpunhookerAvatar von GetRektBoy724

    GetRektBoy724/SharpUnhooker

    408Auf GitHub ansehen↗

    C# Based Universal API Unhooker - Automatically Unhook API Hives (ntdll.dll, kernel32.dll, advapi32.dll, and kernelbase.dll). SharpUnhooker helps you to evades user-land monitoring done by AVs and/or EDRs by cleansing/refreshing API DLLs that loaded on the process (Offensive Side) or remove API…

    C#
    Auf GitHub ansehen↗408
  • hlldz/invoke-phant0mH

    hlldz/Invoke-Phant0m

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • hlldz/phant0mAvatar von hlldz

    hlldz/Phant0m

    1,807Auf GitHub ansehen↗

    Svchost is essential in the implementation of so-called shared service processes, where a number of services can share a process in order to reduce resource consumption. Grouping multiple services into a single process conserves computing resources, and this consideration was of particular…

    C
    Auf GitHub ansehen↗1,807
  • hlldz/reflexxionAvatar von hlldz

    hlldz/RefleXXion

    500Auf GitHub ansehen↗

    RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array. After…

    C++
    Auf GitHub ansehen↗500
  • johnwoodman/stealthinjectorJ

    JohnWoodman/stealthInjector

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • jthuraisamy/syswhispers2J

    jthuraisamy/SysWhispers2

    0Auf GitHub ansehen↗

    SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls.

    Auf GitHub ansehen↗0
  • kharos102/ntdllunpatcherAvatar von Kharos102

    Kharos102/NtdllUnpatcher

    151Auf GitHub ansehen↗

    Example code for EDR bypassing, please use this for testing blue team detection capabilities against this type of malware that will bypass EDR's userland hooks. Code is a bit spaghetti-like at the moment and serves only as a PoC. Not for malicious use. Note that this particular code was tested…

    C++
    Auf GitHub ansehen↗151
  • knownsec/shellcodeloaderAvatar von knownsec

    knownsec/shellcodeloader

    1,748Auf GitHub ansehen↗

    shellcodeloader

    C++
    Auf GitHub ansehen↗1,748
  • kyleavery/aceldrAvatar von kyleavery

    kyleavery/AceLdr

    1,020Auf GitHub ansehen↗

    A position-independent reflective loader for Cobalt Strike. Zero results from Hunt-Sleeping-Beacons, BeaconHunter, BeaconEye, Patriot, Moneta, PE-sieve, or MalMemDetect.

    C
    Auf GitHub ansehen↗1,020
  • lem0nsec/shellghostAvatar von lem0nSec

    lem0nSec/ShellGhost

    1,199Auf GitHub ansehen↗

    A memory-based evasion technique which makes shellcode invisible from process start to end.

    C
    Auf GitHub ansehen↗1,199
  • antoniococo/mapping-injectionA

    antonioCoco/Mapping-Injection

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • mattifestation/ef0132ba4ae3cc136914da32a88106b9M

    mattifestation/ef0132ba4ae3cc136914da32a88106b9

    0Auf GitHub ansehen↗
    Auf GitHub ansehen↗0
  • 0xer3bus/poolpartybofAvatar von 0xEr3bus

    0xEr3bus/PoolPartyBof

    452Auf GitHub ansehen↗

    A beacon object file implementation of PoolParty Process Injection Technique by @SafeBreach and @0xDeku, that abuses Windows Thread Pools. The BOF supports the 5 technique/variant: - Insert TPIO work item to the target process's thread pool. - Insert TPALPC work item to the target process's…

    C
    Auf GitHub ansehen↗452