IBM RedCON 2020 - Throwing an AquaWrench into the Kernel
☆43Aug 25, 2020Updated 6 years ago
Alternatives and similar repositories for IBM-RedCON-2020
Users that are interested in IBM-RedCON-2020 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- .NET Assembly to Retrieve Outlook Calendar Details☆13Oct 7, 2021Updated 5 years ago
- ☆31Jul 27, 2020Updated 6 years ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42May 9, 2019Updated 7 years ago
- Injection of MSIL using Cecil☆12Jul 28, 2015Updated 11 years ago
- Automation Engine using the Covenant API and lua scripting☆24Dec 8, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- C# project to create or modify existing LNKs☆55Oct 18, 2022Updated 4 years ago
- Evading WinDefender ATP credential-theft☆257Dec 2, 2019Updated 6 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆424Jul 27, 2022Updated 4 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆16Jul 2, 2021Updated 5 years ago
- A simple proof of concept for detecting use of Cobalt Strike's execute-assembly☆59Apr 1, 2022Updated 4 years ago
- Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability☆121Jul 30, 2020Updated 6 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…☆67Nov 14, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- Script that searches through all COM objects for any methods containing a key word of your choosing.☆74Feb 28, 2020Updated 6 years ago
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆41Aug 6, 2021Updated 5 years ago
- Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)☆425Apr 22, 2021Updated 5 years ago
- ☆162Dec 30, 2022Updated 3 years ago
- Simple and sane cryptographic wrapper library.☆33Apr 21, 2023Updated 3 years ago
- Silence EDRs by removing kernel callbacks☆236Dec 7, 2020Updated 5 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- dem sharp donuts☆199Sep 11, 2022Updated 4 years ago
- Create a minidump of the LSASS process from memory☆257Nov 2, 2022Updated 3 years ago
- ☆61Feb 10, 2022Updated 4 years ago
- Are you forwarding DNS traffic to another server for some reason, but want to make sure only queries for certain names are passed? Say no…☆20Oct 16, 2022Updated 4 years ago
- Expriments☆491Oct 3, 2024Updated 2 years ago
- NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)☆117Jun 7, 2023Updated 3 years ago
- Example code for using named pipe output with beacon ReflectiveDLLs☆118Jun 24, 2020Updated 6 years ago
- A simple POC to demonstrate the power of .NET debugging for injection☆74Aug 11, 2020Updated 6 years ago
- Project to check which Nt/Zw functions your local EDR is hooking☆200Mar 21, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Apply a filter to the events being reported by windows event logging☆262Apr 24, 2021Updated 5 years ago
- A "no frills" 1 class-only, C# .NET command line parser with support for - and / args, switches only, and Name : Values☆34Jan 20, 2026Updated 9 months ago
- Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post☆133Jan 14, 2023Updated 3 years ago
- C# Data Collector for the BloodHound Project, Version 3☆35Dec 28, 2021Updated 4 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆246Jul 14, 2021Updated 5 years ago
- Lockless allows for the copying of locked files.☆255Apr 30, 2021Updated 5 years ago
- ☆50Jun 30, 2020Updated 6 years ago