Octoberfest7 / KillDefender_BOF
Beacon Object File implementation of pwn1sher's KillDefender
☆62Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for KillDefender_BOF
- A wrapper of ldap_shell.py module which in ntlmrelayx☆60Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆38Updated last year
- Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray☆43Updated last year
- AddDefenderExclusions Beacon Object File☆31Updated last year
- Execute Remote Assembly with args passing and with AMSI and ETW patching .☆32Updated last year
- dump lsass☆36Updated 2 years ago
- dump lsass tool☆39Updated 2 years ago
- ☆38Updated last year
- Load shellcode via syscall☆47Updated 3 years ago
- ☆21Updated last year
- CVE-2021-42287/CVE-2021-42278 exploits in powershell☆37Updated 2 years ago
- command execute without 445 port☆51Updated 2 years ago
- resource-based constrained delegation RBCD☆43Updated 2 years ago
- Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;☆31Updated 2 years ago
- cmd2shellcode☆78Updated 3 years ago
- MSSQL CLR for pentest.☆53Updated last year
- ☆30Updated last year
- A Cobalt Strike memory evasion loader for redteamers☆95Updated last year
- A Custom CLR Assembly for MSSQL of the popular tool GodPotato☆70Updated last year
- List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly☆58Updated 2 years ago
- CrackMapExec extension module/protocol support☆41Updated last year
- A Mimikatz For Only Extracting Login Passwords.(Bypasses Most AV's)☆59Updated 2 years ago
- more conveniently Visual-Studio-BOF-template☆53Updated last year
- ☆45Updated 5 months ago
- (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll☆41Updated 2 years ago
- Evasive loader to bypass static detection☆54Updated 10 months ago
- Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process☆32Updated 2 years ago
- ShellCodeLoader via DInvoke☆49Updated 3 years ago