Helixo32 / SimpleEDRLinks
Simple EDR that injects a DLL into a process to place a hook on specific Windows API
☆95Updated 2 years ago
Alternatives and similar repositories for SimpleEDR
Users that are interested in SimpleEDR are comparing it to the libraries listed below
Sorting:
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆50Updated last year
- ☆70Updated 2 years ago
- Installing wazuh SIEM Unified XDR and SIEM protection☆31Updated 5 months ago
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆58Updated 3 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆92Updated last year
- ☆122Updated 4 years ago
- ☆119Updated 7 months ago
- AAD related enumeration in Nim☆132Updated 2 years ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆98Updated 6 months ago
- Living Off the Foreign Land setup scripts☆72Updated 8 months ago
- Serverless Redirector in various cloud vendor for red team☆73Updated 2 years ago
- Bypass AMSI By Dividing files into multiple smaller files☆46Updated 2 years ago
- AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…☆91Updated 3 months ago
- Your Skyfall Infrastructure Pack☆87Updated this week
- Microsoft Graph API post-exploitation toolkit☆95Updated last year
- Slide decks and/or materials from conference presentations☆56Updated 3 years ago
- An Ansible collection that installs an ADFS deployment with optional configurations.☆42Updated 11 months ago
- Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL☆23Updated 3 years ago
- Small project to facilitate creation of .lnk payloads☆75Updated 3 years ago
- ☆74Updated 5 months ago
- ☆120Updated last year
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆118Updated last year
- Utilities for obfuscating shellcode☆95Updated 2 months ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆126Updated 2 months ago
- ☆52Updated last year
- Async Python library to parse local and remote disk images.☆81Updated 4 months ago
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆141Updated last year
- Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.☆122Updated 3 years ago
- Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation☆31Updated 3 years ago
- Decrypt GlobalProtect configuration and cookie files.☆154Updated last year