ChrisAD / ads-payload
Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using environment variables, alternating data streams and wmic.
☆53Updated 11 months ago
Alternatives and similar repositories for ads-payload:
Users that are interested in ads-payload are comparing it to the libraries listed below
- Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting☆41Updated 6 years ago
- ☆40Updated 6 years ago
- \ PowerAvails Powershell /☆12Updated 6 years ago
- ☆25Updated 6 years ago
- Cobalt Strike log state tracking, parsing, and storage☆23Updated 5 years ago
- The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…☆29Updated 6 years ago
- Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.☆43Updated 7 years ago
- ☆19Updated 7 years ago
- Bash one-liner that will parse harmj0y's SharpRoast or Rebeus kerberoast into hashcat crack-able format.☆32Updated 6 years ago
- Mimikatz HashClash☆12Updated 9 years ago
- Tool to acquire netNTLM hashes on a local machine wihtout network traffic☆12Updated 6 years ago
- Everything related to Cobalt Strike☆15Updated 5 years ago
- ☆13Updated 3 years ago
- ☆17Updated 7 years ago
- ☆21Updated 7 years ago
- Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.☆64Updated 7 years ago
- Useful Windows and AD tools☆15Updated 3 years ago
- Empire HTTP(S) C2 redirector setup script☆47Updated 6 years ago
- C2Shell is a shell script designed for a fast deploy of C&C servers for Red Team Operations.☆2Updated 4 years ago
- ☆76Updated 6 years ago
- ☆17Updated 9 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆33Updated 5 years ago
- Random source codes☆25Updated 4 years ago
- This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remo…☆51Updated 6 years ago
- ☆15Updated 9 years ago
- Generates anti-sandbox analysis HTA files without payloads☆15Updated 8 years ago
- Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)☆30Updated 7 years ago
- AMSI bypass stager generator☆28Updated 6 years ago
- Convert Empire profiles to Apache mod_rewrite scripts☆27Updated 5 years ago
- Python script which will type a file into an RDP session. For when drag and drop and disk mounting is not possible☆31Updated 11 months ago