关于RPC一些绕EDR的tips
☆201Mar 3, 2023Updated 3 years ago
Alternatives and similar repositories for RpcsDemo
Users that are interested in RpcsDemo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆404Feb 6, 2023Updated 3 years ago
- dump lsass进程工具☆555Jul 20, 2023Updated 3 years ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cobalt Strike BOF that Add a user to localgroup by samr☆143Nov 30, 2022Updated 3 years ago
- Cobalt Strike 二开项目☆185Feb 11, 2023Updated 3 years ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆140Dec 26, 2023Updated 2 years ago
- Bypassing UAC with SSPI Datagram Contexts☆474Sep 24, 2023Updated 3 years ago
- Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…☆1,323Jun 21, 2024Updated 2 years ago
- 重构Beacon☆165Aug 19, 2024Updated 2 years ago
- Take a screenshot without injection for Cobalt Strike☆203Jun 7, 2023Updated 3 years ago
- Misc TaskScheduler Plays☆237Sep 27, 2022Updated 4 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆79Jul 23, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 寻找可利用的白文件☆563Aug 18, 2025Updated last year
- ☆21Feb 27, 2022Updated 4 years ago
- RPC远程主机信息匿名扫描工具☆318Sep 30, 2022Updated 4 years ago
- 使用Visral Studio开发ShellCode☆240Oct 11, 2023Updated 3 years ago
- 一款dump hash工具配合后渗透的利用☆273Apr 21, 2023Updated 3 years ago
- Asset scanning by dictionary stitching Domain to identify Exchange Servers versions☆45Mar 2, 2023Updated 3 years ago
- EDR绕过demo☆290Jan 14, 2024Updated 2 years ago
- Pillager是一个适用于后渗透期间的信息收集工具☆1,296Sep 7, 2024Updated 2 years ago
- An implementation of an indirect system call☆133Aug 25, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆449Mar 11, 2024Updated 2 years ago
- 通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化☆338Apr 10, 2022Updated 4 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆101Aug 15, 2023Updated 3 years ago
- ☆27Apr 24, 2025Updated last year
- A BOF that runs unmanaged PEs inline☆705Oct 23, 2024Updated 2 years ago
- Execute unmanaged Windows executables in CobaltStrike Beacons☆723Mar 4, 2023Updated 3 years ago
- 远程创建任务计划工具☆187Apr 23, 2022Updated 4 years ago
- Mssql利用工具☆278Aug 7, 2023Updated 3 years ago
- 利用 NTLMSSP 探测 Windows 信息☆173Aug 24, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件 的文件将被复制到特定的 X64 或 X86 文件夹☆642Mar 24, 2026Updated 7 months ago
- Syscall免杀☆510Jun 21, 2024Updated 2 years ago
- A little tool to play with the Seclogon service☆326Jul 10, 2022Updated 4 years ago
- OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。☆676Dec 30, 2022Updated 3 years ago
- Callback Function Loader Implemented in Go☆137Mar 26, 2024Updated 2 years ago
- New generation of wmiexec.py☆1,305Aug 28, 2026Updated 2 months ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆250Jun 11, 2024Updated 2 years ago