Cybereason / Invoke-WMILM
☆229Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for Invoke-WMILM
- Lateral Movement technique using DCOM and HTA☆228Updated 2 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆254Updated 5 years ago
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆103Updated 7 years ago
- How To Execute Shellcode via HTA☆135Updated 6 years ago
- Generates anti-sandbox analysis HTA files without payloads☆118Updated 7 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆75Updated 6 years ago
- The PowerThIEf, an Internet Explorer Post Exploitation library☆130Updated 6 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆319Updated 7 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆284Updated 6 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆158Updated 7 years ago
- PowerDNS: Powershell DNS Delivery☆211Updated 6 years ago
- Liniaal - A communication extension to Ruler☆96Updated 6 years ago
- BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET☆143Updated 4 years ago
- Assorted scripts and one off things☆259Updated 2 months ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆253Updated 6 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆162Updated 7 years ago
- a simple portforwarder in ps1 with embeded c# code☆89Updated 6 years ago
- A repository of some of my Windows 10 Device Guard Bypasses☆133Updated 7 years ago
- A library for integrating communication channels with the Cobalt Strike External C2 server☆281Updated 6 years ago
- Aggregation of Cobalt Strike's aggressor scripts.☆144Updated 6 years ago
- PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.☆147Updated 5 years ago
- Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)☆102Updated 3 years ago
- VBS Reversed TCP Meterpreter Stager☆86Updated 7 years ago
- lateral movement techniques that can be used during red team exercises☆265Updated 4 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆105Updated 4 years ago
- A collection of files for adding and leveraging custom properties in BloodHound.☆181Updated 4 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆321Updated 5 years ago
- PowerShell to Slack C2☆109Updated 6 years ago