MzHmO / articles
☆27Updated 3 months ago
Related projects ⓘ
Alternatives and complementary repositories for articles
- ☆88Updated 2 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆70Updated 3 weeks ago
- Modified versions of the Cobalt Strike Process Injection Kit☆87Updated 9 months ago
- ☆66Updated 3 months ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆72Updated last year
- Python tool to interact with WMI StdRegProv☆38Updated last week
- ☆83Updated 5 months ago
- Lateral Movement via the .NET Profiler☆73Updated 5 months ago
- Execute commands in other Sessions☆79Updated 3 months ago
- ☆42Updated 2 years ago
- ☆77Updated last year
- To audit the security of read-only domain controllers☆113Updated 11 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆107Updated last month
- ☆89Updated 2 years ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆73Updated last month
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆149Updated last year
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆75Updated 6 months ago
- Library of BOFs to interact with SQL servers☆146Updated 5 months ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆57Updated 4 months ago
- Lateral Movement☆118Updated 11 months ago
- .NET deserialization hunter☆73Updated 3 months ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated 9 months ago
- Winsocket for Cobalt Strike.☆98Updated last year
- ☆61Updated 9 months ago
- A simple PoC of injection shellcode into a remote process and get the output using namepipe☆36Updated 9 months ago
- Secretsdump C# version only supporting local (live) operation☆47Updated last year
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆78Updated last year
- Construct the payload at runtime using an array of offsets☆58Updated 4 months ago
- ☆91Updated 8 months ago
- ☆94Updated last year