0xthirteen / reg_snake
Python tool to interact with WMI StdRegProv
☆53Updated 2 months ago
Alternatives and similar repositories for reg_snake:
Users that are interested in reg_snake are comparing it to the libraries listed below
- ☆50Updated 3 weeks ago
- TokenCert☆92Updated 2 months ago
- Lateral Movement via the .NET Profiler☆75Updated last month
- ☆74Updated 5 months ago
- Modified versions of the Cobalt Strike Process Injection Kit☆90Updated 11 months ago
- ☆92Updated 4 months ago
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆73Updated 11 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆112Updated 3 months ago
- Enumerate information from NTLM authentication enabled web endpoints 🔎☆35Updated last year
- Execute commands in other Sessions☆84Updated 5 months ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆101Updated 9 months ago
- Click Once + App Domain☆63Updated last year
- ☆105Updated last month
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆45Updated 10 months ago
- ☆37Updated 3 weeks ago
- ☆80Updated 8 months ago
- ☆92Updated 10 months ago
- ☆24Updated 2 months ago
- Library of BOFs to interact with SQL servers☆154Updated last month
- Source code and examples for PassiveAggression☆54Updated 7 months ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆75Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆45Updated 2 weeks ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆68Updated 8 months ago
- Adversary Emulation Framework☆61Updated 5 months ago
- Secretsdump C# version only supporting local (live) operation☆47Updated last year
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆123Updated last month
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆70Updated last year
- ☆39Updated this week
- Execute shellcode via Bluetooth device authentication☆28Updated last week