EspressoCake / cIdentifyServiceDependencies_BOFLinks
Beacon Object File (BOF) for identifying dependent child services of a given parent.
☆18Updated 6 months ago
Alternatives and similar repositories for cIdentifyServiceDependencies_BOF
Users that are interested in cIdentifyServiceDependencies_BOF are comparing it to the libraries listed below
Sorting:
- ☆52Updated 2 months ago
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆42Updated this week
- ☆49Updated 6 months ago
- ☆54Updated 6 months ago
- ☆99Updated last year
- ☆32Updated 3 weeks ago
- ☆50Updated 5 months ago
- ☆35Updated last year
- ☆49Updated 7 months ago
- a BOF implementation of various registry persistence methods☆92Updated last month
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆57Updated 8 months ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆120Updated 2 weeks ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Updated 2 years ago
- Local SYSTEM auth trigger for relaying - X☆154Updated 4 months ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆38Updated 4 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆83Updated 2 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆75Updated last year
- converts sRDI compatible dlls to shellcode☆33Updated 11 months ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Updated last year
- Click Once + App Domain☆64Updated 2 years ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆105Updated 7 months ago
- ShadowDropper is a utility for covertly delivering and executing payloads on a target system.☆25Updated 5 months ago
- Updated version of a long known self deletion technique to work with 24H2.☆61Updated 6 months ago
- TokenCert☆102Updated last year
- modified mssqlclient from impacket to extract policies from the SCCM database☆40Updated last month
- adws enumeration bof☆160Updated 2 months ago
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆19Updated last year
- PrimitiveInjection by using Read, Write and Allocation Primitives.☆51Updated 6 months ago
- Random BOFs for LDAP tradecraft☆71Updated 3 months ago
- This code silently installs Chrome extensions on Mac, Windows, and Linux☆92Updated 5 months ago