FourCoreLabs / TrustedInstallerPOCLinks
A simple go Proof of Concept to start a new shell as TrustedInstaller
☆62Updated 2 years ago
Alternatives and similar repositories for TrustedInstallerPOC
Users that are interested in TrustedInstallerPOC are comparing it to the libraries listed below
Sorting:
- Create and enumerate hidden desktops.☆88Updated 2 years ago
- A POC to disable TamperProtection and other Defender / MDE components☆252Updated last year
- DLL Hijacking and Mock directories technique to bypass Windows UAC security feature and getting high-level privileged reverse shell. Secu…☆44Updated last year
- The best powershell obfuscator ever made☆120Updated 4 months ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆74Updated last year
- Nim process hollowing loader☆61Updated 5 months ago
- UAC Bypass using CMSTP in Rust☆33Updated last year
- PS-MOTW: PowerShell scripts to set / show / remove MOTW (Mark of the Web)☆51Updated 2 years ago
- SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows applications installer and up…☆259Updated 2 months ago
- ☆26Updated 9 months ago
- Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applicatio…☆147Updated 11 months ago
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆105Updated last year
- This is my starred repositories including the description for each tool. Makes search/filter over them easier.☆57Updated 9 months ago
- Token Elevation to authorized user as SYSTEM or Domain Admins☆25Updated last month
- Go ransomware leveraging ChaCha20 and ECIES encryption with a web-based control panel.☆46Updated 7 months ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated 2 years ago
- Bypasses AMSI protection through remote memory patching and parsing technique.☆54Updated 7 months ago
- A bunch of scripts and code i wrote.☆145Updated last year
- A tool to verify and create PE Checksums for Portable Executable (PE) files.☆55Updated 2 years ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆102Updated 8 months ago
- ☆40Updated last year
- Windows AppLocker Driver (appid.sys) LPE☆69Updated last year
- ☆61Updated 2 years ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- Spoofing desktop login applications with WinForms and WPF☆176Updated last year
- Dynamic shellcode loader with sophisticated evasion capabilities☆273Updated 2 months ago
- a small wiper malware programmed in c#☆59Updated 3 years ago
- ☆108Updated last year
- A slightly more fun way to disable windows defender☆49Updated 7 months ago
- Advanced dynamic malware analysis tool.☆82Updated last year