PowerHub
teleRAT
Our great sponsors
| PowerHub | teleRAT | |
|---|---|---|
| 1 | 6 | |
| 693 | 109 | |
| - | - | |
| 6.0 | 0.0 | |
| 16 days ago | about 1 year ago | |
| PowerShell | Python | |
| MIT License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
PowerHub
-
Dumping LSASS without Mimikatz with MiniDumpWriteDump == Reducing Chances of Getting Flagged
It doesn't, it just recognizes -bxor. You can use a combination of -bnot and -band instead. I do this in my pet project, which still successfully uses basic AMSI bypasses: https://github.com/AdrianVollmer/PowerHub
teleRAT
What are some alternatives?
PsMapExec - A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec
pupy - Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
fsociety - fsociety Hacking Tools Pack – A Penetration Testing Framework
tacticalrmm - A remote monitoring & management tool, built with Django, Vue and Go.
pywerview - A (partial) Python rewriting of PowerSploit's PowerView
tacticalrmm - A remote monitoring & management tool, built with Django, Vue and Go. [Moved to: https://github.com/amidaware/tacticalrmm]
GTFONow - Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Python-Rootkit - Python Remote Administration Tool (RAT) to gain meterpreter session
BlackMamba - C2/post-exploitation framework
yarGen - yarGen is a generator for YARA rules
tunic - Install Linux from a running Windows system, without need for a live USB.
aurora - Malware similarity platform with modularity in mind.