AD ACL Abuser for Havoc C2
☆26Mar 30, 2026Updated 7 months ago
Alternatives and similar repositories for acl-abuse-havoc
Users that are interested in acl-abuse-havoc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- C library for Diffie Hellman key exchange with Curve448 und Curve25519. Extracted from OpenSSL.☆11Jan 7, 2021Updated 5 years ago
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 11 months ago
- dcsync bof☆54Feb 13, 2026Updated 9 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆151Apr 22, 2026Updated 6 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- BOF for Havoc that copies locked Windows files (SAM, SYSTEM, NTDS.dit) via raw MFT parsing — no VSS, no Registry APIs, no PowerShell☆138Apr 6, 2026Updated 7 months ago
- In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.☆17Sep 27, 2026Updated last month
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆91Oct 20, 2025Updated last year
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆48Jun 18, 2026Updated 4 months ago
- ☆18Nov 23, 2023Updated 2 years ago
- Simple, header-only, pattern matching and patching class + tool written in modern C++.☆26Jun 5, 2026Updated 5 months ago
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆209Updated this week
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- abusing windows toast notifications for fun and user manipulation☆107Jul 11, 2026Updated 4 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆167Apr 15, 2026Updated 6 months ago
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 7 months ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 5 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- ☆22Feb 22, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 11 months ago
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆50Oct 18, 2026Updated 3 weeks ago
- ☆127Sep 1, 2024Updated 2 years ago
- adws enumeration bof☆176Sep 1, 2026Updated 2 months ago
- Proof of concept demonstrating a method of proxying syscalls indirectly☆10Jul 3, 2024Updated 2 years ago
- Collect Defender Telemetry/Logs☆33Nov 4, 2026Updated last week
- A simple proof-of-concept Windows syscall logger using the NT instrumentation callback mechanism.☆37Mar 6, 2026Updated 8 months ago
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆152Jan 17, 2026Updated 9 months ago
- arm64 linux position-independent shellcode framework☆32Dec 12, 2025Updated 11 months ago
- shellcode生成框架☆93Jul 11, 2024Updated 2 years ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- Collection of UAC Bypass Techniques Weaponized as BOFs☆23Jan 5, 2026Updated 10 months ago
- HVCI/kCET-aware bugcheck suppressor PoC☆22May 11, 2026Updated 6 months ago
- A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass☆179Sep 22, 2025Updated last year
Are these results useful?