关于RPC一些绕EDR的tips
☆201Mar 3, 2023Updated 3 years ago
Alternatives and similar repositories for RpcsDemo
Users that are interested in RpcsDemo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- 添加计划任务方法集合☆315Aug 6, 2023Updated 3 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆405Feb 6, 2023Updated 3 years ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆142Dec 26, 2023Updated 2 years ago
- dump lsass进程工具☆559Jul 20, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bypassing UAC with SSPI Datagram Contexts☆475Sep 24, 2023Updated 2 years ago
- Cobalt Strike 二开项目☆185Feb 11, 2023Updated 3 years ago
- 重构Beacon☆166Aug 19, 2024Updated 2 years ago
- Take a screenshot without injection for Cobalt Strike☆204Jun 7, 2023Updated 3 years ago
- Asset scanning by dictionary stitching Domain to identify Exchange Servers versions☆45Mar 2, 2023Updated 3 years ago
- ☆21Feb 27, 2022Updated 4 years ago
- Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…☆1,328Jun 21, 2024Updated 2 years ago
- Fork & modify of Wireguard's Memmod☆33Aug 2, 2023Updated 3 years ago
- EDR绕过demo☆292Jan 14, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- An implementation of an indirect system call☆132Aug 25, 2023Updated 3 years ago
- Misc TaskScheduler Plays☆239Sep 27, 2022Updated 3 years ago
- 寻找可利用的白文件☆563Aug 18, 2025Updated last year
- RPC远程主机信息匿名扫描工具☆319Sep 30, 2022Updated 3 years ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆103Aug 15, 2023Updated 3 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆80Jul 23, 2023Updated 3 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆144Nov 30, 2022Updated 3 years ago
- OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。☆677Dec 30, 2022Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆32Apr 23, 2023Updated 3 years ago
- Pillager是一个适用于后渗透期间的信息收集工具☆1,295Sep 7, 2024Updated last year
- A little tool to play with the Seclogon service☆328Jul 10, 2022Updated 4 years ago
- ☆27Apr 24, 2025Updated last year
- Mssql利用工具☆280Aug 7, 2023Updated 3 years ago
- 远程创建任务计划工具☆188Apr 23, 2022Updated 4 years ago
- 利用 NTLMSSP 探测 Windows 信息☆173Aug 24, 2022Updated 4 years ago
- New generation of wmiexec.py☆1,296Aug 28, 2026Updated last week
- 一款dump hash工具配合后渗透的利用☆276Apr 21, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆724Mar 4, 2023Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆102Mar 20, 2023Updated 3 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆149Mar 13, 2022Updated 4 years ago
- A BOF that runs unmanaged PEs inline☆702Oct 23, 2024Updated last year
- Syscall免杀☆510Jun 21, 2024Updated 2 years ago
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆206Aug 25, 2023Updated 3 years ago
- Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)☆292Jan 15, 2022Updated 4 years ago