CICADA8-Research / LogHunterLinks
Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)
☆76Updated last year
Alternatives and similar repositories for LogHunter
Users that are interested in LogHunter are comparing it to the libraries listed below
Sorting:
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆162Updated 2 months ago
- ☆155Updated 8 months ago
- Lateral Movement☆126Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆94Updated last year
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆89Updated 10 months ago
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆82Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆127Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated last year
- ☆86Updated 7 months ago
- TokenCert☆102Updated last year
- ☆198Updated 9 months ago
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆71Updated last year
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆150Updated 11 months ago
- ☆92Updated last year
- An impacket-lite cli tool that combines many useful impacket functions using a single session.☆57Updated 3 months ago
- Abuse leaked token handles.☆134Updated 2 years ago
- Automated .NET AppDomain hijack payload generation☆129Updated 11 months ago
- ☆57Updated 10 months ago
- PowerShell script to generate ShellCode in various formats☆46Updated last year
- Dump processes over WMI with MSFT_MTProcess☆81Updated 3 months ago
- ☆108Updated 10 months ago
- Proof of concept for Kerberos Armoring abuse.☆56Updated last month
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆149Updated last year
- C# tool to identify and exploit weaknesses within MSSQL instances in Active Directory environments☆113Updated 3 years ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆101Updated 2 years ago
- Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…☆122Updated 6 months ago
- ☆59Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- C++ Staged Shellcode Loader with Evasion capabilities.☆98Updated last year
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated 2 years ago