0xflux / ETW-Bypass-Rust
Event Tracing for Windows EDR bypass in Rust
☆18Updated 8 months ago
Alternatives and similar repositories for ETW-Bypass-Rust:
Users that are interested in ETW-Bypass-Rust are comparing it to the libraries listed below
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆16Updated 10 months ago
- Example of using Sleep to create better named pipes.☆41Updated last year
- BOF for C2 framework☆39Updated 3 months ago
- ☆28Updated 9 months ago
- Unix Process hollowing in rust☆20Updated 2 months ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆30Updated last year
- A third-party Gopher Assassin for the Havoc Framework.☆44Updated last year
- Dump LSASS by spoofing command line arguments to procdump.☆19Updated 4 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆47Updated last year
- Rewrite to fit my needs☆27Updated 7 months ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆18Updated last year
- Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute☆20Updated 8 months ago
- Bunch of BOF files☆29Updated 2 months ago
- DFSCoerce exe revisited version with custom authentication☆38Updated last year
- in-process powershell runner for BRC4☆44Updated last year
- ☆16Updated 6 months ago
- malleable profile generator GUI for Havoc☆56Updated last year
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 7 months ago
- SAM Dumping in C#☆43Updated last month
- Donut generator in rust.☆26Updated 3 years ago
- ☆47Updated last year
- ☆47Updated 2 years ago
- ☆30Updated last month
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆19Updated 5 months ago
- Tool to aid in dumping LSASS process remotely☆38Updated 7 months ago
- A simple rpc2socks alternative in pure Go.☆28Updated 7 months ago
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆31Updated 9 months ago
- ☆24Updated 2 years ago