DimopoulosElias / alpc-mmc-uac-bypass

Related projects ⓘ

Alternatives and complementary repositories for alpc-mmc-uac-bypass

• atredispartners / CVE-2018-0952-SystemCollector
  PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service
  ☆108Updated 6 years ago
• tyranid / DeviceGuardBypasses
  A repository of some of my Windows 10 Device Guard Bypasses
  ☆133Updated 7 years ago
• nettitude / Invoke-PowerThIEf
  The PowerThIEf, an Internet Explorer Post Exploitation library
  ☆130Updated 6 years ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆254Updated 5 years ago
• Cybereason / Invoke-WMILM
  ☆229Updated 6 years ago
• hvqzao / foolavc
  foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV
  ☆109Updated 3 years ago
• codewhitesec / LethalHTA
  Lateral Movement technique using DCOM and HTA
  ☆229Updated 2 years ago
• sourceincite / CVE-2018-8440
  CVE-2018-8440 standalone exploit
  ☆79Updated 6 years ago
• Und3rf10w / external_c2_framework
  Python api for usage with cobalt strike's External C2 specification
  ☆225Updated last year
• hlldz / APC-PPID
  Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
  ☆155Updated 5 years ago
• Cn33liz / VBSMeter
  VBS Reversed TCP Meterpreter Stager
  ☆86Updated 7 years ago
• rvrsh3ll / Word-Doc-Video-Embed-EXE-POC
  ☆92Updated 6 years ago
• P1CKLES / SharpBox
  SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API.
  ☆108Updated 3 years ago
• FuzzySecurity / BlueHatIL-2020
  BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET
  ☆143Updated 4 years ago
• sevagas / WindowsDefender_ASR_Bypass-OffensiveCon2019
  Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.
  ☆93Updated 5 years ago
• vysecurity / CACTUSTORCH
  CACTUSTORCH: Payload Generation for Adversary Simulations
  ☆75Updated 6 years ago
• ustayready / CasperStager
  PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
  ☆147Updated 5 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆73Updated 4 years ago
• praetorian-inc / vulcan
  a tool to make it easy and fast to test various forms of injection
  ☆172Updated 5 years ago
• homjxi0e / LOLBAS222
  APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )
  ☆108Updated 6 years ago
• 0xbadjuju / rundotnetdll32
  A tool to run .Net DLLs from the command line
  ☆100Updated 6 years ago
• mandiant / flare-kscldr
  FLARE Kernel Shellcode Loader
  ☆176Updated 5 years ago
• zeroSteiner / reflective-polymorphism
  Reflective Polymorphism
  ☆104Updated 6 years ago
• decoder-it / psportfwd
  a simple portforwarder in ps1 with embeded c# code
  ☆89Updated 6 years ago