Cybereason / Invoke-WMILM
☆228Updated 6 years ago
Alternatives and similar repositories for Invoke-WMILM:
Users that are interested in Invoke-WMILM are comparing it to the libraries listed below
- Lateral Movement technique using DCOM and HTA☆231Updated 2 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆257Updated 6 years ago
- Generates anti-sandbox analysis HTA files without payloads☆119Updated 8 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆285Updated 6 years ago
- BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET☆145Updated 5 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆75Updated 6 years ago
- Liniaal - A communication extension to Ruler☆97Updated 6 years ago
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆104Updated 7 years ago
- The PowerThIEf, an Internet Explorer Post Exploitation library☆130Updated last month
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆166Updated 7 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆252Updated 6 years ago
- a simple portforwarder in ps1 with embeded c# code☆90Updated 6 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆320Updated 7 years ago
- A repository of some of my Windows 10 Device Guard Bypasses☆135Updated 7 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Updated 6 years ago
- A collection of files for adding and leveraging custom properties in BloodHound.☆183Updated 5 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆160Updated 8 years ago
- Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)☆103Updated 4 years ago
- Assorted scripts and one off things☆265Updated 7 months ago
- PowerDNS: Powershell DNS Delivery☆212Updated 6 years ago
- A Powershell implementation of PrivExchange designed to run under the current user's context☆124Updated 6 years ago
- How To Execute Shellcode via HTA☆137Updated 7 years ago
- VBS Reversed TCP Meterpreter Stager☆87Updated 7 years ago
- Aggregation of Cobalt Strike's aggressor scripts.☆142Updated 7 years ago
- ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.☆228Updated 7 years ago
- ☆73Updated 7 years ago
- Forward local or remote tcp ports through SMB pipes.☆295Updated 4 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆112Updated 5 years ago
- lateral movement techniques that can be used during red team exercises☆270Updated 5 years ago
- DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.☆147Updated 5 years ago