Mr-Un1k0d3r / PoisonHandlerView external linksLinks
lateral movement techniques that can be used during red team exercises
☆273Jan 13, 2020Updated 6 years ago
Alternatives and similar repositories for PoisonHandler
Users that are interested in PoisonHandler are comparing it to the libraries listed below
Sorting:
- dem sharp donuts☆202Sep 11, 2022Updated 3 years ago
- Port of Invoke-Excel4DCOM☆104Oct 12, 2019Updated 6 years ago
- Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell☆498Mar 15, 2023Updated 2 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,594Jul 10, 2023Updated 2 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆218Mar 5, 2020Updated 5 years ago
- RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.☆330Jul 7, 2023Updated 2 years ago
- DLL Generator for side loading attack☆175Feb 5, 2019Updated 7 years ago
- Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.☆67Oct 3, 2020Updated 5 years ago
- SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp☆141Mar 10, 2021Updated 4 years ago
- WMI Event Subscription Persistence in C#☆112May 29, 2019Updated 6 years ago
- Targeted Payload Execution☆100Apr 9, 2020Updated 5 years ago
- C# Targeted Attack Reconnissance Tools☆120Jan 11, 2021Updated 5 years ago
- Silencing Sysmon via driver unload☆235Oct 13, 2022Updated 3 years ago
- Tool to create hidden registry keys.☆491Oct 23, 2019Updated 6 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆328Mar 26, 2019Updated 6 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆251Sep 26, 2020Updated 5 years ago
- C# Script used for Red Team☆724Nov 16, 2021Updated 4 years ago
- Evading WinDefender ATP credential-theft☆256Dec 2, 2019Updated 6 years ago
- ObscurityLabs RedTeam C# Toolkit☆124Sep 3, 2019Updated 6 years ago
- Create a minidump of the LSASS process from memory☆261Nov 2, 2022Updated 3 years ago
- Standalone version of my AES Powershell payload for Cobalt Strike.☆111Dec 27, 2019Updated 6 years ago
- A C# tool to search through a running instance of Outlook for keywords☆111Jan 14, 2021Updated 5 years ago
- Inject .Net payloads into other .Net assemblies on disk☆61Dec 12, 2019Updated 6 years ago
- Tools for discovery and abuse of COM hijacks☆331Oct 15, 2019Updated 6 years ago
- Process Injection☆766Oct 24, 2021Updated 4 years ago
- Miscellaneous Tools☆269Oct 29, 2020Updated 5 years ago
- PoC of a VBA macro spawning a process with a spoofed parent and command line.☆381Apr 28, 2020Updated 5 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆290Aug 7, 2020Updated 5 years ago
- This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit c…☆576Jan 22, 2020Updated 6 years ago
- Sustainable shellcode evasion☆112Dec 11, 2024Updated last year
- ☆351Feb 21, 2022Updated 3 years ago
- Credential Dumper☆79Feb 19, 2020Updated 5 years ago
- CobaltStrike External C2 for Websockets☆197Jul 16, 2019Updated 6 years ago
- ☆69Dec 19, 2018Updated 7 years ago
- ☆259Nov 19, 2018Updated 7 years ago
- Constrained Language Mode + AMSI bypass all in one☆158Jul 29, 2019Updated 6 years ago
- Automate AV evasion by calling AMSI☆88May 31, 2023Updated 2 years ago
- ☆54Apr 27, 2019Updated 6 years ago
- Repo with various Red Team scripts☆147Nov 12, 2020Updated 5 years ago