关于RPC一些绕EDR的tips
☆201Mar 3, 2023Updated 3 years ago
Alternatives and similar repositories for RpcsDemo
Users that are interested in RpcsDemo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- 添加计划任务方法集合☆315Aug 6, 2023Updated 3 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆406Feb 6, 2023Updated 3 years ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆141Dec 26, 2023Updated 2 years ago
- dump lsass进程工具☆559Jul 20, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Bypassing UAC with SSPI Datagram Contexts☆472Sep 24, 2023Updated 2 years ago
- Cobalt Strike 二开项目☆185Feb 11, 2023Updated 3 years ago
- 重构Beacon☆166Aug 19, 2024Updated last year
- Take a screenshot without injection for Cobalt Strike☆204Jun 7, 2023Updated 3 years ago
- Asset scanning by dictionary stitching Domain to identify Exchange Servers versions☆45Mar 2, 2023Updated 3 years ago
- ☆21Feb 27, 2022Updated 4 years ago
- Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…☆1,324Jun 21, 2024Updated 2 years ago
- Fork & modify of Wireguard's Memmod☆33Aug 2, 2023Updated 3 years ago
- EDR绕过demo☆292Jan 14, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- An implementation of an indirect system call☆132Aug 25, 2023Updated 2 years ago
- Misc TaskScheduler Plays☆239Sep 27, 2022Updated 3 years ago
- 寻找可利用的白文件☆563Aug 18, 2025Updated 11 months ago
- RPC远程主机信息匿名扫描工具☆319Sep 30, 2022Updated 3 years ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆103Aug 15, 2023Updated 3 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆80Jul 23, 2023Updated 3 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆143Nov 30, 2022Updated 3 years ago
- OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。☆676Dec 30, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆32Apr 23, 2023Updated 3 years ago
- Pillager是一个适用于后渗透期间的信息收集工具☆1,291Sep 7, 2024Updated last year
- A little tool to play with the Seclogon service☆327Jul 10, 2022Updated 4 years ago
- ☆27Apr 24, 2025Updated last year
- Mssql利用工具☆279Aug 7, 2023Updated 3 years ago
- 远程创建任务计划工具☆188Apr 23, 2022Updated 4 years ago
- 利用 NTLMSSP 探测 Windows 信息☆173Aug 24, 2022Updated 3 years ago
- New generation of wmiexec.py☆1,295Apr 26, 2026Updated 3 months ago
- 一款dump hash工具配合后渗透的利用☆277Apr 21, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆723Mar 4, 2023Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆103Mar 20, 2023Updated 3 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆149Mar 13, 2022Updated 4 years ago
- A BOF that runs unmanaged PEs inline☆703Oct 23, 2024Updated last year
- Syscall免杀☆510Jun 21, 2024Updated 2 years ago
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆206Aug 25, 2023Updated 2 years ago
- Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)☆292Jan 15, 2022Updated 4 years ago