OneLogicalMyth / zeroday-powershell
A PowerShell example of the Windows zero day priv esc
☆326Updated 6 years ago
Alternatives and similar repositories for zeroday-powershell:
Users that are interested in zeroday-powershell are comparing it to the libraries listed below
- UAC 0day, all day!☆277Updated 7 years ago
- Provides In-memory compilation and reflective loading of C# apps for AV evasion.☆369Updated last year
- APT34/OILRIG leak☆231Updated 6 years ago
- Remote Recon and Collection☆450Updated 7 years ago
- Forward local or remote tcp ports through SMB pipes.☆295Updated 4 years ago
- This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I ge…☆351Updated 6 years ago
- WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…☆353Updated 6 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆257Updated 6 years ago
- morphHTA - Morphing Cobalt Strike's evil.HTA☆522Updated 2 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆321Updated 7 years ago
- Windows Pentest Scripts☆230Updated 7 years ago
- Tool written in python3 to determine where the AV signature is located in a binary/payload☆314Updated 7 years ago
- DNS-Persist is a post-exploitation agent which uses DNS for command and control.☆211Updated 7 years ago
- DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.☆150Updated 6 years ago
- Teaching old shellcode new tricks☆205Updated 7 years ago
- Local UNIX PrivEsc Aggregation☆246Updated 9 years ago
- Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec☆450Updated 9 years ago
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆387Updated 6 years ago
- PowerShell oneliner to retrieve wdigest passwords from the memory☆219Updated 7 years ago
- Collection of things made during my preparation to take on OSCE☆188Updated 3 years ago
- Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software …☆198Updated 7 years ago
- Exploits and advisories☆190Updated 4 years ago
- A list of ways to execute code on Windows using legitimate Windows tools☆307Updated 5 years ago
- Public work for CVE-2019-0708☆292Updated 5 years ago
- A framework for stealthy domain reconnaissance☆302Updated 3 years ago
- A fully functional DanderSpritz lab in 2 commands☆426Updated 5 years ago
- Powershell VNC injector☆337Updated 4 years ago
- Fileless web browser information extraction☆218Updated 7 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆285Updated 6 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆395Updated 4 years ago