关于RPC一些绕EDR的tips
☆200Mar 3, 2023Updated 3 years ago
Alternatives and similar repositories for RpcsDemo
Users that are interested in RpcsDemo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆402Feb 6, 2023Updated 3 years ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆138Dec 26, 2023Updated 2 years ago
- dump lsass进程工具☆556Jul 20, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Bypassing UAC with SSPI Datagram Contexts☆473Sep 24, 2023Updated 3 years ago
- Cobalt Strike 二开项目☆184Feb 11, 2023Updated 3 years ago
- 重构Beacon☆164Aug 19, 2024Updated 2 years ago
- Take a screenshot without injection for Cobalt Strike☆201Jun 7, 2023Updated 3 years ago
- Asset scanning by dictionary stitching Domain to identify Exchange Servers versions☆45Mar 2, 2023Updated 3 years ago
- ☆20Feb 27, 2022Updated 4 years ago
- Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…☆1,322Jun 21, 2024Updated 2 years ago
- Fork & modify of Wireguard's Memmod☆32Aug 2, 2023Updated 3 years ago
- EDR绕过demo☆290Jan 14, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An implementation of an indirect system call☆133Aug 25, 2023Updated 3 years ago
- Misc TaskScheduler Plays☆236Sep 27, 2022Updated 4 years ago
- 寻找可利用的白文件☆562Aug 18, 2025Updated last year
- RPC远程主机信息匿名扫描工具☆318Sep 30, 2022Updated 4 years ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆101Aug 15, 2023Updated 3 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆78Jul 23, 2023Updated 3 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆143Nov 30, 2022Updated 3 years ago
- OrcaC2是一款基 于Websocket加密通信的多功能C&C框架，使用Golang实现。☆674Dec 30, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆30Apr 23, 2023Updated 3 years ago
- Pillager是一个适用于后渗透期间的信息收集工具☆1,295Sep 7, 2024Updated 2 years ago
- A little tool to play with the Seclogon service☆325Jul 10, 2022Updated 4 years ago
- ☆27Apr 24, 2025Updated last year
- Mssql利用工具☆277Aug 7, 2023Updated 3 years ago
- 远程创建任务计划工具☆187Apr 23, 2022Updated 4 years ago
- 利用 NTLMSSP 探测 Windows 信息☆173Aug 24, 2022Updated 4 years ago
- New generation of wmiexec.py☆1,303Aug 28, 2026Updated last month
- 一款dump hash工具配合后渗透的利用☆273Apr 21, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆721Mar 4, 2023Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆102Mar 20, 2023Updated 3 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆147Mar 13, 2022Updated 4 years ago
- A BOF that runs unmanaged PEs inline☆703Oct 23, 2024Updated last year
- Syscall免杀☆509Jun 21, 2024Updated 2 years ago
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆204Aug 25, 2023Updated 3 years ago
- Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)☆289Jan 15, 2022Updated 4 years ago