EvilBytecode / Lifetime-Amsi-EtwPatchLinks
Two in one, patch lifetime powershell console, no more etw and amsi!
☆99Updated 7 months ago
Alternatives and similar repositories for Lifetime-Amsi-EtwPatch
Users that are interested in Lifetime-Amsi-EtwPatch are comparing it to the libraries listed below
Sorting:
- Local SYSTEM auth trigger for relaying☆167Updated 5 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆92Updated last year
- Adversary Emulation Framework☆128Updated 5 months ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆150Updated 10 months ago
- ☆151Updated 7 months ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆119Updated last year
- Lateral Movement☆125Updated 2 years ago
- ☆198Updated 8 months ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆212Updated last year
- ☆138Updated last month
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆113Updated last year
- ☆137Updated 10 months ago
- Evasive Payload Delivery Server & C2 Redirector☆112Updated last month
- OAuth Device Code Phishing Toolkit☆97Updated 3 months ago
- ☆109Updated 10 months ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆181Updated 9 months ago
- ☆57Updated 10 months ago
- Lateral movement with DCOM DLL hijacking☆174Updated 5 months ago
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆141Updated 3 weeks ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆129Updated 4 months ago
- Lateral Movement Bof with MSI ODBC Driver Install☆141Updated 2 months ago
- A Python POC for CRED1 over SOCKS5☆161Updated last year
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆100Updated 2 years ago
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆97Updated last year
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆162Updated last month
- Advanced In-Memory PowerShell Process Injection Framework☆71Updated 5 months ago
- Tool to extract username and password of current user from PanGPA in plaintext☆88Updated last year
- The DCERPC only printerbug.py version☆182Updated last month
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆133Updated 5 months ago
- A hoontr must hoont☆102Updated 3 weeks ago