Offensive tools written for practice purposes
☆161Sep 23, 2022Updated 3 years ago
Alternatives and similar repositories for win32api-practice
Users that are interested in win32api-practice are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Use current thread token to execute command☆15Jan 27, 2021Updated 5 years ago
- Beacon.dll reverse☆140Sep 5, 2021Updated 4 years ago
- ☆74Jul 23, 2021Updated 5 years ago
- bypass BeaconEye☆88Sep 9, 2021Updated 4 years ago
- decrypt rdp credentials to password using mimikatz.☆28Dec 18, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- C++ WinRM API via Reflective DLL☆145Sep 11, 2021Updated 4 years ago
- Defense Evasion & Bypass AntiVirus reference☆74Mar 28, 2021Updated 5 years ago
- ☆36Mar 4, 2025Updated last year
- HVNC based on RustDesk☆110May 1, 2024Updated 2 years ago
- In-memory token vault BOF for Cobalt Strike☆151Aug 18, 2022Updated 3 years ago
- Windows对抗沙箱和虚拟机的方法总结☆404Apr 22, 2020Updated 6 years ago
- 记录一下我学习的Win32CPP☆56Aug 5, 2025Updated 11 months ago
- A shellcode function to encrypt a running process image when sleeping.☆338Sep 11, 2021Updated 4 years ago
- A little tool to play with the Seclogon service☆327Jul 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NTLM relay test.☆195Jun 26, 2025Updated last year
- POCs for Shellcode Injection via Callbacks☆416Feb 23, 2021Updated 5 years ago
- Misc TaskScheduler Plays☆238Sep 27, 2022Updated 3 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago
- EDR Evasion - Combination of SwampThing - TikiTorch☆29May 28, 2020Updated 6 years ago
- A way to delete a locked file, or current running executable, on disk.☆621Nov 5, 2025Updated 8 months ago
- A library for loading and executing PE (Portable Executable) from memory without ever touching the disk☆168Nov 26, 2020Updated 5 years ago
- ☆644Jul 21, 2025Updated last year
- 提取DC日志，快速获取域用户对应IP地址☆311Mar 21, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- WINDOWS TELEMETRY权限维持☆258Jul 2, 2020Updated 6 years ago
- CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能☆728Sep 1, 2021Updated 4 years ago
- Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…☆694Mar 11, 2024Updated 2 years ago
- 影子用户 克隆☆232Dec 30, 2021Updated 4 years ago
- Memshell☆300Dec 7, 2021Updated 4 years ago
- Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-softw…☆275Apr 4, 2023Updated 3 years ago
- Research project for understanding how Mimikatz work and become better at C☆121Oct 22, 2021Updated 4 years ago
- UAC bypass for x64 Windows 7 - 11（无弹窗版）☆276Sep 5, 2022Updated 3 years ago
- Search msDS-AllowedToActOnBehalfOfOtherIdentity☆35Jan 17, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆247Sep 19, 2023Updated 2 years ago
- OXID_Find by C++（多线程） 通过OXID解析器获取Windows远程主机上网卡地址☆91Jul 19, 2020Updated 6 years ago
- Beacon Object File Loader☆295Dec 3, 2023Updated 2 years ago
- C# Lsass parser☆297Oct 13, 2021Updated 4 years ago
- Windows rdp相关的登录记录导出工具，可用于后渗透中Windows服务器的信息收集阶段。输出内容包括：本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。☆284Jun 23, 2024Updated 2 years ago
- POC tool to convert CobaltStrike BOF files to raw shellcode☆220Nov 5, 2021Updated 4 years ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作☆119Jun 18, 2024Updated 2 years ago