Mr-Un1k0d3r / RemoteProcessInjection
C# remote process injection utility for Cobalt Strike
☆84Updated 5 years ago
Alternatives and similar repositories for RemoteProcessInjection:
Users that are interested in RemoteProcessInjection are comparing it to the libraries listed below
- SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.☆89Updated 4 years ago
- Port of Invoke-Excel4DCOM☆103Updated 5 years ago
- C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread☆119Updated 5 years ago
- Standalone version of my AES Powershell payload for Cobalt Strike.☆108Updated 5 years ago
- .NET 4.0 Scheduled Job Lateral Movement☆89Updated 4 years ago
- Load C# Code straight to memory☆53Updated 4 years ago
- A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …☆84Updated 4 years ago
- Suite of Shellcode Running Utilities☆107Updated 5 years ago
- Spray a hash via smb to check for local administrator access☆139Updated 4 years ago
- C# PoC implementation for bypassing AMSI via in memory patching☆65Updated 4 years ago
- ☆45Updated 3 years ago
- CSHARP DCOM Fun☆126Updated 5 years ago
- C# port of the Get-AppLockerPolicy PS cmdlet☆98Updated 2 years ago
- Collect & Optimize awesome CobaltStrike aggressor scripts, hope to create a All-In-One framework.☆37Updated 4 years ago
- SharpBuster is a C# implementation of a directory brute forcing tool. It's designed to be used via Cobalt Strike's execute-assembly and s…☆60Updated 4 years ago
- A little tool to play with Kerberos.☆66Updated last year
- ☆92Updated 3 years ago
- A Cobalt Strike Aggressor script to generate GadgetToJScript payloads☆99Updated 4 years ago
- AMSI Bypass Via the Heap☆105Updated 4 years ago
- PoC to interact with local/remote registry hives through WMI☆85Updated 4 years ago
- Cobalt Strike Aggressor script menu for Powerview/SharpView☆129Updated 6 years ago
- ☆70Updated 3 years ago
- MSBuild without MSbuild.exe☆129Updated 4 years ago
- Aggressor Scripts for Cobalt Strike☆76Updated last year
- .Net Assembly to block ETW telemetry in current process☆76Updated 4 years ago
- WMI Event Subscription Persistence in C#☆112Updated 5 years ago
- External C2 Using IE COM Objects☆98Updated 6 years ago
- Credential Dumper☆76Updated 5 years ago
- Hardened Proof of Concept of D/Invoke Process Injection malware☆40Updated 4 years ago
- MSBuild Without MSBuild.exe☆155Updated 4 years ago