Tool to bypass LSA Protection (aka Protected Process Light)
☆66Jan 2, 2025Updated last year
Alternatives and similar repositories for PPLKiller
Users that are interested in PPLKiller are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SAM Dumping in C#☆56Nov 27, 2025Updated 11 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆76May 1, 2024Updated 2 years ago
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆64Feb 4, 2026Updated 9 months ago
- Enumerate the Domain for Readable and Writable Shares☆24Oct 15, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- A simple script to elevate current session to SYSTEM (needs to be run as Administrator)☆17Nov 11, 2024Updated last year
- ☆52Dec 5, 2025Updated 11 months ago
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆271Apr 8, 2025Updated last year
- ☆160Dec 13, 2024Updated last year
- dcsync bof☆54Feb 13, 2026Updated 8 months ago
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆171May 28, 2025Updated last year
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆60Jul 13, 2025Updated last year
- PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirector…☆416Jan 14, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…☆183Sep 3, 2025Updated last year
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆107Jan 10, 2026Updated 9 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Bypass LSA protection using the BYODLL technique☆181Sep 21, 2024Updated 2 years ago
- Fun GUI for Group3rs output log☆36Aug 14, 2023Updated 3 years ago
- CVE-2024-40711-exp☆42Oct 17, 2024Updated 2 years ago
- ☆200Mar 28, 2025Updated last year
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Check the Domain for Local Admin Access☆26Feb 20, 2025Updated last year
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- Python tool to automatically perform SPN-less RBCD attacks.☆132Jan 7, 2026Updated 9 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.☆248Sep 17, 2026Updated last month
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆442Sep 29, 2025Updated last year
- TokenCert☆105Nov 15, 2024Updated last year
- LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and r…☆386Apr 26, 2025Updated last year
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆166Aug 28, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A Sliver C2 module for NetExec☆13Updated this week
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆136Dec 2, 2023Updated 2 years ago
- adws enumeration bof☆176Sep 1, 2026Updated 2 months ago
- BOF to steal Teams cookies☆133Nov 2, 2025Updated last year
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated last year
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆191May 19, 2025Updated last year
- ☆100Sep 1, 2024Updated 2 years ago