Windows绕过EDR实现DumpHash
☆266Jul 30, 2026Updated 3 months ago
Alternatives and similar repositories for HashDump-BypassEDR
Users that are interested in HashDump-BypassEDR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆72Jul 12, 2026Updated 3 months ago
- Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. In C#, C++, Cryst…☆388Aug 31, 2026Updated 2 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,657Updated this week
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- BYOVD: Use 360 WFP driver to block EDR/XDR network connection.☆132Feb 10, 2026Updated 8 months ago
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- Nim implementation for sud0Ru's Credential Dumping from SAM/SECURITY Hives Method (a.k.a. SilentHarvest)☆109Apr 4, 2026Updated 7 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- Shellcode injection using the Windows Debugging API☆185Jan 4, 2026Updated 10 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- PowerShell implementation for AD CS☆163Jul 30, 2026Updated 3 months ago
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A little tool to play with Windows security☆163Apr 10, 2026Updated 6 months ago
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆296Jun 22, 2026Updated 4 months ago
- AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64☆637Oct 24, 2026Updated last week
- 当前仅限于8.4和8.5☆17May 4, 2026Updated 6 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,846Updated this week
- Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and book…☆557Jan 8, 2026Updated 9 months ago
- COM Windows Persistence Technique☆91Apr 27, 2026Updated 6 months ago
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆122Jan 4, 2026Updated 10 months ago
- Another BYOVD process killer. works on all EDR's. fully signed.☆291May 19, 2026Updated 5 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Oktos 是一款红队后渗透平台，作为 XRED.TEAM 的一部分。它采用了模块化设计，支持 BOF 动态加载、多信道异步通信与内存免杀，内置的 AI 助手可辅助编排或自动执行后渗透任务，为红队提供隐蔽、高效、智能的作战能力。☆213Oct 17, 2026Updated 2 weeks ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆113Jul 26, 2026Updated 3 months ago
- 哥斯拉webshell管理工具二开☆439Updated this week
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆129Jan 24, 2026Updated 9 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆149Apr 22, 2026Updated 6 months ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆247Jul 8, 2026Updated 3 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆185Apr 14, 2026Updated 6 months ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆148Jan 29, 2026Updated 9 months ago
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆291May 18, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆167Apr 15, 2026Updated 6 months ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- Mythic C2 MSTeams Communication Channel☆42Sep 13, 2026Updated last month
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆284Apr 16, 2026Updated 6 months ago
- 腾讯安全沙龙历届议题ppt，腾讯安全沙龙是由腾讯云鼎实验室主导运营的高端网络安全技术交流平台，是腾讯安全面向产学研各界打造的核心技术品牌之一。☆143Jul 24, 2026Updated 3 months ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆104Jul 1, 2026Updated 4 months ago