IonizeCbr / AmsiPatchDetection

Related projects ⓘ

Alternatives and complementary repositories for AmsiPatchDetection

• djhohnstein / SharpSC
  Simple .NET assembly to interact with services.
  ☆38Updated 5 years ago
• xan7r / Misc
  ☆45Updated 3 years ago
• rvrsh3ll / RuralBishop
  D/Invoke port of UrbanBishop
  ☆29Updated 3 years ago
• redteamertips / DinvokeDupetokenAndThreadSwitcheroo
  ☆24Updated 3 years ago
• ThunderGunExpress / Thunder_Woosus
  ☆37Updated 6 years ago
• fozavci / TradecraftDevelopment-Fundamentals
  Tradecraft Development Fundamentals
  ☆40Updated 3 years ago
• sussurro / BetterTorch
  A more obfuscated CactusTorch targeted towards office
  ☆31Updated 3 years ago
• PorLaCola25 / TransactedSharpMiniDump
  Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…
  ☆68Updated 4 years ago
• 0xthirteen / PowerView3-Aggressor
  Cobalt Strike Aggressor script menu for Powerview/SharpView
  ☆28Updated 5 years ago
• CCob / PwnyForm
  ☆44Updated 4 years ago
• kafkaesqu3 / SharpStomp
  Timestomping module: overwrite file create/modify times in .NET (no pinvoke)
  ☆22Updated 2 years ago
• jfmaes / CSharpReflectionWorkshop
  The repository that complements the From zero to hero: creating a reflective loader in C# workshop
  ☆38Updated 3 years ago
• jnqpblc / SharpSvc
  SharpSvc is a simple code set to interact with the SC Manager API and is compatible with Cobalt Strike.
  ☆25Updated last year
• yoda66 / MalwareDevTalk
  ☆47Updated 4 years ago
• blackarrowsec / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆17Updated 3 years ago
• netbiosX / GhostLoader
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆51Updated 4 years ago
• xenoscr / Useful-BloodHound-Queries
  A collection of Neo4j/BloodHound queries to collect interesting information.
  ☆45Updated 2 years ago
• kyleavery / ThirdEye
  Weaponizing CLRvoyance for Post-Ex .NET Execution
  ☆35Updated 3 years ago
• 0xS2V2 / marsform
  terraform deployment for red team
  ☆21Updated last year
• optiv / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆17Updated 3 years ago
• djhohnstein / ScatterBrain
  Suite of Shellcode Running Utilities
  ☆106Updated 4 years ago
• dtrizna / DotNetInject
  Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.
  ☆39Updated 4 years ago
• Adepts-Of-0xCC / MiniDumpWriteDumpPoC
  MiniDumpWriteDump behavior modification hook
  ☆49Updated 3 years ago
• pgormanDS / hash_spider
  A module for CME that spiders across a domain.
  ☆35Updated 2 years ago
• s0lst1c3 / SharpFinder
  ☆30Updated 4 years ago
• rmdavy / WordAmsiBypass
  ☆37Updated 5 years ago
• NinjaStyle82 / rbcd_permissions
  Add SD for controlled computer object to a target object for RBCD using LDAP
  ☆38Updated 3 years ago
• warferik / CVE-2019-3980
  ☆16Updated 3 years ago
• slyd0g / SK8RAT
  C++ implant that interfaces with a SK8PARK server
  ☆47Updated 3 years ago