CICADA8-Research / LogHunterLinks
Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)
☆77Updated last year
Alternatives and similar repositories for LogHunter
Users that are interested in LogHunter are comparing it to the libraries listed below
Sorting:
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆163Updated 3 months ago
- Dump processes over WMI with MSFT_MTProcess☆81Updated 4 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆89Updated 11 months ago
- Automated .NET AppDomain hijack payload generation☆129Updated 11 months ago
- ☆109Updated 11 months ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆150Updated 11 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆94Updated last year
- Lateral Movement☆125Updated 2 years ago
- ☆158Updated 8 months ago
- ☆57Updated 11 months ago
- (MeetC2 a.k.a Meeting C2) - A framework abusing Google Calendar APIs.☆131Updated 4 months ago
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆148Updated 2 months ago
- ☆198Updated 10 months ago
- TokenCert☆102Updated last year
- Just another EDR killer☆85Updated last week
- ☆86Updated 8 months ago
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated 2 years ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆82Updated last year
- ☆92Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆128Updated last year
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆71Updated last year
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆119Updated last month
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆149Updated last year
- Python tool to interact with WMI StdRegProv☆60Updated last year
- ZoomBotC2 is a stealthy Command and Control (C2) framework that leverages Zoom's API endpoints for covert communication between implants …☆57Updated 7 months ago
- An impacket-lite cli tool that combines many useful impacket functions using a single session.☆57Updated 2 weeks ago
- A C# port from Invoke-GhostTask☆119Updated 2 years ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- Tool to obtain hash using MS-SNTP for user accounts☆28Updated last year