0xthirteen / reg_snakeLinks
Python tool to interact with WMI StdRegProv
☆60Updated last year
Alternatives and similar repositories for reg_snake
Users that are interested in reg_snake are comparing it to the libraries listed below
Sorting:
- ☆109Updated 11 months ago
- A C# port from Invoke-GhostTask☆119Updated 2 years ago
- Dump processes over WMI with MSFT_MTProcess☆81Updated 4 months ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆85Updated 9 months ago
- ☆92Updated last year
- ☆83Updated last year
- ☆137Updated 11 months ago
- Abuse leaked token handles.☆134Updated 2 years ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆89Updated 11 months ago
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆99Updated 6 months ago
- Remotely Enumerate sessions using undocumented Windows Station APIs☆118Updated last year
- SAM Dumping in C#☆54Updated 2 months ago
- A BOF to enumerate system process, their protection levels, and more.☆124Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆128Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- An impacket-lite cli tool that combines many useful impacket functions using a single session.☆57Updated 3 weeks ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆75Updated last year
- TokenCert☆102Updated last year
- ☆75Updated 2 years ago
- Lateral Movement via the .NET Profiler☆100Updated last year
- ☆117Updated last year
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆75Updated last year
- Modified versions of the Cobalt Strike Process Injection Kit☆105Updated 2 years ago
- ☆53Updated 11 months ago
- Sniffing files generator☆60Updated 11 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆105Updated 6 months ago
- ☆57Updated 11 months ago
- A C# utility for interacting with SCOM☆95Updated 2 months ago
- Tool to obtain hash using MS-SNTP for user accounts☆28Updated last year
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago