ProxyWatch
☆90Sep 3, 2026Updated last month
Alternatives and similar repositories for Proxywatch
Users that are interested in Proxywatch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- Beacon Object File for LDAP Queries Through ADWS☆36Jun 12, 2026Updated 4 months ago
- ☆220Sep 11, 2026Updated last month
- Windows SSH Misconfiguration Discovery Tool - Map lateral movement paths through misconfigured SSH services in Active Directory environme…☆93May 11, 2026Updated 5 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆39Jul 4, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- One PsExec client to rule them all☆15Mar 25, 2026Updated 6 months ago
- ☆19Dec 25, 2025Updated 9 months ago
- .NET library and PowerShell module for Windows RPC filter management☆28Mar 28, 2026Updated 6 months ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆52Jun 28, 2026Updated 3 months ago
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 10 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated last month
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆193May 31, 2026Updated 4 months ago
- ☆71Jul 12, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 5 months ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆107Jun 5, 2026Updated 4 months ago
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆296Feb 21, 2026Updated 7 months ago
- Next-Generation BOF Template | BOF Linter | Obj Rewriter☆60Dec 4, 2025Updated 10 months ago
- Activation Context Hijacking Evasion Tool☆312Jun 17, 2026Updated 3 months ago
- Live ETW-TI event viewer for Windows kernel threat-intelligence telemetry. Research tool for exploring the same signals commercial EDRs r…☆166Apr 15, 2026Updated 5 months ago
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆116Jan 26, 2026Updated 8 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆147Apr 22, 2026Updated 5 months ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆101Jan 2, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A BOF designed to inspect processes memory and addresses☆41Apr 19, 2026Updated 5 months ago
- A header-only, freestanding C++20 template for IR-bytecode VM loaders☆27May 10, 2026Updated 5 months ago
- ☆193Oct 21, 2025Updated 11 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆19May 22, 2026Updated 4 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 2 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 6 months ago
- A modern alternative Web-UI for the Mythic Command and Control Server☆83Jul 3, 2026Updated 3 months ago
- Atomic test units for BOF execution☆61Apr 26, 2026Updated 5 months ago
- Crystal Palace Evasion kit for Sliver☆119Jun 13, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated 11 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆162Jul 20, 2026Updated 2 months ago
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆217Aug 13, 2026Updated last month
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆101Apr 30, 2026Updated 5 months ago
- ☆89Sep 3, 2026Updated last month
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 2 months ago
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 2 months ago