BlackSnufkin / CheckPlz
Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
☆16Updated 4 months ago
Alternatives and similar repositories for CheckPlz:
Users that are interested in CheckPlz are comparing it to the libraries listed below
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52Updated 11 months ago
- ☆37Updated 2 months ago
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆56Updated 2 years ago
- Linux CS bypass technique☆33Updated 3 months ago
- ☆23Updated 2 months ago
- Python3 rewrite of AsOutsider features of AADInternals☆45Updated 4 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 9 months ago
- SACL Scanner is a tool designed to scan and analyze SACLs.☆38Updated 2 months ago
- ☆50Updated 6 months ago
- ☆44Updated 10 months ago
- Scripts to interact with Microsoft Graph APIs☆36Updated 6 months ago
- Deploy a phishing infrastructure on the fly.☆68Updated 4 months ago
- An Ansible collection that installs an ADFS deployment with optional configurations.☆30Updated 4 months ago
- BypassIT is a framework for covert malware delivery and post-exploitation using AutoIT for red / blue team self assessment.☆35Updated 3 months ago
- a tiny program to consume from ETW providers for research☆47Updated 4 months ago
- Lifetime AMSI bypass.☆34Updated 2 weeks ago
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆39Updated 3 months ago
- Your Skyfall Infrastructure Pack☆67Updated last week
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆78Updated 8 months ago
- ☆10Updated last year
- Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.☆37Updated 5 months ago
- Living Off the Foreign Land setup scripts☆67Updated 2 months ago
- A simple POC to expose Mythic as a MCP server☆60Updated last month
- Automatically create an operation log of your shell! Supports Linux (Bash/Zsh) and Windows (PowerShell/CMD).☆32Updated 2 months ago
- Claude MCP server to perform analysis on ROADrecon data☆36Updated last month
- C# port of the AMSI bypass technique originally developed and documented by Andrea Bocchetti☆24Updated this week
- macOS dylib stager☆32Updated 3 months ago
- This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)☆45Updated last month
- Dump Kerberos tickets from the KCM database of SSSD☆50Updated 7 months ago
- A Nemesis powered Retrieval-Augmented Generation (RAG) chatbot proof-of-concept.☆60Updated last year