Pazuzu: Reflective DLL to run binaries from memory
☆213Aug 4, 2020Updated 6 years ago
Alternatives and similar repositories for Pazuzu
Users that are interested in Pazuzu are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Lateral Movement technique using DCOM and HTA☆232Oct 18, 2022Updated 4 years ago
- Powershell VNC injector☆347Jun 29, 2020Updated 6 years ago
- Fuzzing tool written in Golang. Insane monkey not included.☆11Feb 22, 2018Updated 8 years ago
- JavaScript Reversed TCP Meterpreter Stager☆138May 25, 2017Updated 9 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆323Jun 5, 2017Updated 9 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Python api for usage with cobalt strike's External C2 specification☆239Mar 22, 2023Updated 3 years ago
- POC for IAT Parsing Payloads☆49Jan 1, 2017Updated 9 years ago
- Standalone version of my AES Powershell payload for Cobalt Strike.☆111Dec 27, 2019Updated 6 years ago
- Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)☆760Jan 28, 2019Updated 7 years ago
- morphHTA - Morphing Cobalt Strike's evil.HTA☆531Apr 14, 2023Updated 3 years ago
- Universal Unhooking☆324Sep 19, 2018Updated 8 years ago
- Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software…☆198Nov 19, 2017Updated 8 years ago
- A minimal tool to extract shellcode from 64-bit PE binaries.☆50Sep 13, 2021Updated 5 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MSBuild without MSbuild.exe☆136Dec 21, 2020Updated 5 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆867Jun 25, 2024Updated 2 years ago
- Tool for interacting with outlook interop during red team engagements☆144Jun 29, 2021Updated 5 years ago
- MSBuild Without MSBuild.exe☆156Dec 21, 2020Updated 5 years ago
- A Powershell implementation of PrivExchange designed to run under the current user's context☆125Jan 31, 2019Updated 7 years ago
- A PowerShell example of the Windows zero day priv esc☆327Sep 12, 2018Updated 8 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆253Sep 26, 2020Updated 6 years ago
- C# DCOM Execution☆17Aug 4, 2019Updated 7 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Tool written in python3 to determine where the AV signature is located in a binary/payload☆314Mar 24, 2018Updated 8 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,551Aug 2, 2019Updated 7 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆288Aug 7, 2020Updated 6 years ago
- Convert Empire profiles to Apache mod_rewrite scripts☆30Sep 17, 2019Updated 7 years ago
- Various C# projects for offensive security☆112Nov 14, 2019Updated 6 years ago
- A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2☆137Jan 5, 2023Updated 3 years ago
- ObscurityLabs RedTeam C# Toolkit☆121Sep 3, 2019Updated 7 years ago
- AntiVirus Evasion Tool☆1,760Apr 23, 2025Updated last year
- Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.☆938May 8, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Process Injection☆763Oct 24, 2021Updated 5 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago
- Remove API hooks from a Beacon process.☆282Sep 18, 2021Updated 5 years ago
- FLARE Kernel Shellcode Loader☆175May 3, 2019Updated 7 years ago
- C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread☆119Apr 9, 2019Updated 7 years ago
- Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive …☆917May 15, 2026Updated 5 months ago
- Environmental (and http) keying for scripting languages☆38Oct 5, 2018Updated 8 years ago