WinRM pass-the-hash BOF with NTLMv2 authentication and signed, encrypted WSMan traffic
☆21Nov 11, 2026Updated this week
Alternatives and similar repositories for WinRM-PtH-BOF
Users that are interested in WinRM-PtH-BOF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆108Nov 4, 2026Updated last week
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Mythic Agent to perform Breach & Attack Simulations☆35Updated this week
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated last year
- Evasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory☆68Nov 6, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆19Sep 1, 2025Updated last year
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆35Aug 13, 2026Updated 3 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆56Aug 10, 2026Updated 3 months ago
- Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability☆253Updated this week
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆55Updated this week
- A curated list of red team tools, C2 frameworks, and adversary simulation resources for offensive security professionals.☆27Oct 9, 2026Updated last month
- Demonstration of the DLL party process injection technique☆100Oct 1, 2026Updated last month
- ☆20Sep 5, 2025Updated last year
- POC to decrypt SmartDeploy encrypted credentials☆12Aug 13, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆63Nov 1, 2026Updated last week
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆102Apr 30, 2026Updated 6 months ago
- Black Sand Beacon a lightweight, memory-resident micro beacon or implant for the LazyOwn RedTeam Framework is the first offensive platfor…☆19Updated this week
- Map every segment you can reach (VLANs, firewall zones, subnets), then find out which of them can actually talk to each other.☆19Nov 5, 2026Updated last week
- Command and control framework☆40Jun 20, 2026Updated 4 months ago
- Havoc plugin allowing in-memory execution of PowerShell cmdlets☆14Dec 14, 2023Updated 2 years ago
- PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph☆26Aug 2, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 10 months ago
- ☆19May 26, 2025Updated last year
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 9 months ago
- ☆17Sep 11, 2025Updated last year
- ☆32Jun 1, 2026Updated 5 months ago
- LdapWordlistHarvester but then with neo4j☆17Jun 3, 2025Updated last year
- Collect Defender Telemetry/Logs☆26Nov 4, 2026Updated last week
- open source implementation of the UDC2 spec used in Cobalt Strike☆62Jul 4, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆19Dec 25, 2025Updated 10 months ago
- Handle Redirect via BYOVD Kernel Read/Write☆22Sep 13, 2026Updated last month
- inspired by mr d0x filefix☆16Feb 4, 2026Updated 9 months ago
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆144Oct 30, 2026Updated last week
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 4 months ago
- Process ID Mutator via BYOVD Kernel R/W☆22Sep 6, 2026Updated 2 months ago
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆129Jan 24, 2026Updated 9 months ago
Are these results useful?