Allevon412 / TeamsImplant
☆203Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for TeamsImplant
- Koppeling x Metatwin x LazySign☆203Updated 3 years ago
- Identify the attack paths in BloodHound breaking your AD tiering☆310Updated 2 years ago
- ☆143Updated last year
- A tool for pointesters to find candies in SharePoint☆240Updated 2 years ago
- Remotely enables Restricted Admin Mode☆204Updated 3 years ago
- ☆180Updated last year
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆258Updated 2 years ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆301Updated 9 months ago
- ☆351Updated 3 years ago
- ☆181Updated 2 years ago
- ☆241Updated last year
- Bypassing AppLocker with C#☆136Updated 3 years ago
- A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user☆249Updated 2 years ago
- Identifies the bytes that Microsoft Defender flags on.☆75Updated 2 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆232Updated 3 years ago
- Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares☆158Updated last year
- Weaponising C# - Fundamentals Training Content☆70Updated 3 years ago
- GolenGMSA tool for working with GMSA passwords☆136Updated 7 months ago
- RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows☆6Updated 2 years ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆378Updated 7 months ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆251Updated last year
- Hookers are cooler than patches.☆166Updated 2 years ago
- Recovering NTLM hashes from Credential Guard☆330Updated last year
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆184Updated 3 years ago
- Investigation about ACL abusing for Active Directory Certificate Services (AD CS)☆119Updated 3 years ago
- 64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.☆127Updated last year
- A fake AMSI Provider which can be used for persistence.☆139Updated 3 years ago
- ☆151Updated 2 weeks ago
- PowerShell Constrained Language Mode Bypass☆232Updated 3 years ago