lateral movement techniques that can be used during red team exercises
☆280Jan 13, 2020Updated 6 years ago
Alternatives and similar repositories for PoisonHandler
Users that are interested in PoisonHandler are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- dem sharp donuts☆199Sep 11, 2022Updated 4 years ago
- MSBuild Without MSBuild.exe☆156Dec 21, 2020Updated 5 years ago
- RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.☆330Jul 7, 2023Updated 3 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆253Sep 26, 2020Updated 6 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,676Jul 10, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- Port of Invoke-Excel4DCOM☆101Oct 12, 2019Updated 7 years ago
- DLL Generator for side loading attack☆176Feb 5, 2019Updated 7 years ago
- Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.☆67Oct 3, 2020Updated 6 years ago
- ☆54Apr 27, 2019Updated 7 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆325Mar 26, 2019Updated 7 years ago
- Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell☆493Mar 15, 2023Updated 3 years ago
- Suite of Shellcode Running Utilities☆112Jan 30, 2020Updated 6 years ago
- A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.☆441Apr 1, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- C# Script used for Red Team☆714Nov 16, 2021Updated 4 years ago
- Targeted Payload Execution☆101Apr 9, 2020Updated 6 years ago
- Zipper, a CobaltStrike file and folder compression utility.☆222Jan 18, 2020Updated 6 years ago
- C# Targeted Attack Reconnissance Tools☆120Jan 11, 2021Updated 5 years ago
- Silencing Sysmon via driver unload☆236Oct 13, 2022Updated 4 years ago
- Tool to create hidden registry keys.☆488Oct 23, 2019Updated 7 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆112Nov 20, 2019Updated 6 years ago
- SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp☆144Mar 10, 2021Updated 5 years ago
- Evading WinDefender ATP credential-theft☆257Dec 2, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Run PowerShell command without invoking powershell.exe☆1,560Apr 9, 2026Updated 6 months ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- Inject .Net payloads into other .Net assemblies on disk☆60Dec 12, 2019Updated 6 years ago
- Tools for discovery and abuse of COM hijacks☆337Oct 15, 2019Updated 7 years ago
- OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…☆545Sep 18, 2022Updated 4 years ago
- Standalone version of my AES Powershell payload for Cobalt Strike.☆111Dec 27, 2019Updated 6 years ago
- Lateral Movement technique using DCOM and HTA☆232Oct 18, 2022Updated 4 years ago
- CVE-2018-8581☆367Oct 21, 2022Updated 4 years ago
- Process Injection☆763Oct 24, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CobaltStrike External C2 for Websockets☆195Jul 16, 2019Updated 7 years ago
- Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments☆134Aug 10, 2021Updated 5 years ago
- Miscellaneous Tools☆270Oct 29, 2020Updated 6 years ago
- Credential Dumper☆81Feb 19, 2020Updated 6 years ago
- Cobalt Strike kit for Lateral Movement☆676Feb 21, 2020Updated 6 years ago
- Extracting Clear Text Passwords from mstsc.exe using API Hooking.☆1,472Jul 20, 2024Updated 2 years ago
- PE File Blessing - To continue or not to continue☆86Nov 23, 2019Updated 6 years ago