Offensive-Panda / ShadowDumper
Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advanced techniques to dump memory, allowing to access sensitive data in LSASS memory.
☆521Updated 2 weeks ago
Alternatives and similar repositories for ShadowDumper:
Users that are interested in ShadowDumper are comparing it to the libraries listed below
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆509Updated 3 weeks ago
- DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYS…☆382Updated 8 months ago
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆580Updated 9 months ago
- A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.☆401Updated 9 months ago
- A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…☆514Updated 10 months ago
- ☆542Updated this week
- Extract and execute a PE embedded within a PNG file using an LNK file.☆404Updated 5 months ago
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆585Updated 9 months ago
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆443Updated 2 months ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆538Updated last year
- ☆353Updated 4 months ago
- Materials for the workshop "Red Team Ops: Havoc 101"☆373Updated 6 months ago
- Collection of UAC Bypass Techniques Weaponized as BOFs☆500Updated last year
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆288Updated 11 months ago
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆586Updated 4 months ago
- Amsi Bypass payload that works on Windwos 11☆377Updated last year
- UAC Bypass By Abusing Kerberos Tickets☆496Updated last year
- Simulate the behavior of AV/EDR for malware development training.☆519Updated last year
- Evasive shellcode loader☆358Updated 6 months ago
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆403Updated 8 months ago
- HookChain: A new perspective for Bypassing EDR Solutions☆512Updated 3 months ago
- Useful C2 techniques and cheatsheets learned from engagements☆497Updated 2 weeks ago
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆352Updated 3 months ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆574Updated 9 months ago
- AV/EDR Lab environment setup references to help in Malware development☆374Updated 2 months ago
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆417Updated last year
- SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection s…☆326Updated 11 months ago
- shellcode loader for your evasion needs☆317Updated 5 months ago
- CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File☆249Updated last month
- Escalate Service Account To LocalSystem via Kerberos☆394Updated last year