EvilBytecode / IDontLikeFileLocksLinks
Title is self explaining, well theres few methods we can do to read locked file and play with it...
☆57Updated this week
Alternatives and similar repositories for IDontLikeFileLocks
Users that are interested in IDontLikeFileLocks are comparing it to the libraries listed below
Sorting:
- EmbedExeLnk by x86matthew modified by d4rkiZ☆41Updated 2 years ago
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆55Updated 2 weeks ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆62Updated last year
- BypassCredGuard CS BOF☆48Updated 11 months ago
- Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence☆62Updated 6 months ago
- ☆52Updated 3 months ago
- ☆100Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆52Updated 2 years ago
- ☆49Updated 8 months ago
- converts sRDI compatible dlls to shellcode☆34Updated 11 months ago
- ☆49Updated 7 months ago
- ☆32Updated 11 months ago
- Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, lateral moviment (scm, winrm, dcom,…☆90Updated last month
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆85Updated 2 months ago
- Threadless shellcode injection tool☆67Updated last year
- Less sugar (entropy) for your binaries☆34Updated 3 months ago
- Using LNK files and user input simulation to start processes under explorer.exe☆32Updated last year
- ☆33Updated 9 months ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆124Updated last month
- a BOF implementation of various registry persistence methods☆92Updated last month
- ☆50Updated 5 months ago
- A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.☆28Updated 6 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆180Updated 2 months ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆56Updated this week
- UDC2 implementation that provides an ICMP C2 channel☆111Updated last month
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated last year
- A BOF that's a BOF Loader☆148Updated last month
- ☆74Updated last year
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆30Updated 11 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61Updated 7 months ago