ASP4RUX / bypassEDR-AVLinks
☆59Updated last year
Alternatives and similar repositories for bypassEDR-AV
Users that are interested in bypassEDR-AV are comparing it to the libraries listed below
Sorting:
- Tamper Active Directory user attributes to collect their hashes with MS-SNTP☆41Updated 11 months ago
- Duplicate not owned Token from Running Process☆73Updated 2 years ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- A small red team course☆40Updated 2 years ago
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated last year
- This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆90Updated 4 months ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆76Updated last year
- ☆85Updated 7 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆61Updated 5 months ago
- PowerShell script to generate ShellCode in various formats☆46Updated last year
- ☆59Updated last year
- Deploy a phishing infrastructure on the fly.☆78Updated last year
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆115Updated last year
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated 2 years ago
- A repository with my code snippets for research/education purposes.☆52Updated 2 years ago
- a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab☆64Updated 11 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆92Updated last year
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆70Updated last year
- Remote Template Injection Toolkit☆44Updated last year
- Permanently disable EDRs as local admin☆122Updated this week
- ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.☆51Updated 2 years ago
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆49Updated 11 months ago
- Docker container for running CobaltStrike 4.10☆37Updated last year
- Situational Awareness script to identify how and where to run implants☆67Updated last year
- exfiltration/infiltration toolkit☆23Updated 2 years ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Updated last year
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆55Updated 2 years ago
- Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…☆79Updated last year
- ☆25Updated 2 years ago
- ☆45Updated 2 months ago