MSIX Building Made Easy for Defenders
☆64Aug 25, 2025Updated last year
Alternatives and similar repositories for MSIXBuilder
Users that are interested in MSIXBuilder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…☆181Sep 3, 2025Updated last year
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆33Feb 10, 2026Updated 8 months ago
- Blog/Journal on how to backdoor VSCode extensions☆81Feb 24, 2026Updated 7 months ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆15Updated this week
- Random BOFs for LDAP tradecraft☆73Sep 9, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Request device ticket/token using the device's MSA☆37Aug 25, 2025Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆167Nov 2, 2025Updated 11 months ago
- ☆52Sep 29, 2026Updated 2 weeks ago
- A portable C# utility for enumerating local and remote windows sessions☆56Jan 1, 2026Updated 9 months ago
- Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…☆165Nov 23, 2025Updated 10 months ago
- C# to read WIM files over the network without transferring the whole file☆40Jan 22, 2026Updated 8 months ago
- Windows Session Hijacking via COM☆351Dec 13, 2025Updated 10 months ago
- A BOF that's a BOF Loader and more☆213Apr 6, 2026Updated 6 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆16Jan 15, 2026Updated 9 months ago
- Extensible MacOS system telemetry generator.☆72Sep 15, 2026Updated last month
- Terms of Use Conditional Access M365 Evilginx Phishlet☆47Jun 23, 2025Updated last year
- ☆51Dec 5, 2025Updated 10 months ago
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated last year
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 8 months ago
- Malware as a Service Ludus Range☆129Sep 24, 2026Updated 3 weeks ago
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Another FAFO project: Weaponizing MSI installers for fileless code execution☆60Aug 12, 2026Updated 2 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated 2 weeks ago
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆38Aug 31, 2025Updated last year
- UDC2 implementation that provides an ICMP C2 channel☆132Nov 24, 2025Updated 10 months ago
- Commandline spoofing on Windows☆99Jul 19, 2026Updated 2 months ago
- Code execution/injection technique using DLL PEB module structure manipulation☆290Jun 4, 2025Updated last year
- load shellcode without P/D Invoke and VirtualProtect call.☆169Sep 2, 2025Updated last year
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 10 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- AppLocker-Based EDR Neutralization☆345Dec 19, 2025Updated 9 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- ☆41Nov 25, 2025Updated 10 months ago
- The DCERPC only printerbug.py version☆233Oct 30, 2025Updated 11 months ago
- Group Policy Objects manipulation and exploitation framework☆322Aug 28, 2026Updated last month
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆208Mar 6, 2025Updated last year