IBM RedCON 2020 - Throwing an AquaWrench into the Kernel
☆44Aug 25, 2020Updated 5 years ago
Alternatives and similar repositories for IBM-RedCON-2020
Users that are interested in IBM-RedCON-2020 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42May 9, 2019Updated 7 years ago
- Injection of MSIL using Cecil☆12Jul 28, 2015Updated 10 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆193Mar 26, 2020Updated 6 years ago
- C# project to create or modify existing LNKs☆55Oct 18, 2022Updated 3 years ago
- ☆31Jul 27, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A simple proof of concept for detecting use of Cobalt Strike's execute-assembly☆59Apr 1, 2022Updated 4 years ago
- Evading WinDefender ATP credential-theft☆257Dec 2, 2019Updated 6 years ago
- A more stealthy variant of "DLL hollowing"☆367Mar 8, 2024Updated 2 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- Automation Engine using the Covenant API and lua scripting☆24Dec 8, 2022Updated 3 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 3 months ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability☆124Jul 30, 2020Updated 5 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆423Jul 27, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆16Jul 2, 2021Updated 5 years ago
- DoppelGate relies on reading ntdll on disk to grab syscall stubs, and patches these syscall stubs into desired functions to bypass Userla…☆125Mar 25, 2022Updated 4 years ago
- PoC demonstrating the use of cve-2020-1034 for privilege escalation☆124Mar 16, 2021Updated 5 years ago
- ☆164Dec 30, 2022Updated 3 years ago
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆219May 3, 2023Updated 3 years ago
- dem sharp donuts☆203Sep 11, 2022Updated 3 years ago
- Loads .NET Assembly Via CLR Loader☆17Mar 6, 2019Updated 7 years ago
- Apply a filter to the events being reported by windows event logging☆264Apr 24, 2021Updated 5 years ago
- Expriments☆486Oct 3, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)☆427Apr 22, 2021Updated 5 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆246Jul 14, 2021Updated 5 years ago
- Example code for using named pipe output with beacon ReflectiveDLLs☆122Jun 24, 2020Updated 6 years ago
- NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)☆117Jun 7, 2023Updated 3 years ago
- ☆47Jun 30, 2020Updated 6 years ago
- Cobalt Strike BOF for quser.exe implementation using Windows API☆88Mar 22, 2023Updated 3 years ago
- Run shellcode through InnoSetup code engine.☆72Jun 22, 2023Updated 3 years ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆592Jan 24, 2023Updated 3 years ago
- Lockless allows for the copying of locked files.☆256Apr 30, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A simple POC to demonstrate the power of .NET debugging for injection☆74Aug 11, 2020Updated 5 years ago
- A "no frills" 1 class-only, C# .NET command line parser with support for - and / args, switches only, and Name : Values☆34Jan 20, 2026Updated 6 months ago
- Script that searches through all COM objects for any methods containing a key word of your choosing.☆73Feb 28, 2020Updated 6 years ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- Are you forwarding DNS traffic to another server for some reason, but want to make sure only queries for certain names are passed? Say no…☆20Oct 16, 2022Updated 3 years ago
- C# code to run PIC using CreateThread☆17Apr 19, 2019Updated 7 years ago
- C# Data Collector for the BloodHound Project, Version 3☆35Dec 28, 2021Updated 4 years ago