REW-sploit / REW-sploit

Related projects: ⓘ

• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆127Updated last year
• Sq00ky / SMB-Session-Spoofing
  ☆117Updated last year
• byt3bl33d3r / pyMalleableC2
  Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.
  ☆262Updated 4 months ago
• o1mate / AppLocker-Bypass
  Bypassing AppLocker with C#
  ☆136Updated 3 years ago
• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆230Updated 2 years ago
• airbus-cert / Invoke-Bof
  Load any Beacon Object File using Powershell!
  ☆245Updated 2 years ago
• silence-is-best / files
  ☆94Updated 3 years ago
• jacob-baines / concealed_position
  Bring your own print driver privilege escalation tool
  ☆241Updated 3 years ago
• darmado / Atomic-Red-Team-C2
  ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabili…
  ☆170Updated 2 weeks ago
• MythicAgents / Medusa
  Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic
  ☆162Updated last year
• pucarasec / zuthaka
  Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…
  ☆174Updated last year
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆200Updated 3 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆256Updated 2 years ago
• mobdk / CopyCat
  Simple rapper for Mimikatz, bypass Defender
  ☆139Updated 2 years ago
• tothi / serviceDetector
  Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…
  ☆214Updated last year
• Allevon412 / TeamsImplant
  ☆200Updated 2 years ago
• 3xpl01tc0d3r / Callidus
  ☆161Updated last year
• CCob / SylantStrike
  Simple EDR implementation to demonstrate bypass
  ☆152Updated 4 years ago
• ly4k / PrintNightmare
  Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)
  ☆178Updated 2 years ago
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆224Updated 2 years ago
• lexfo / rpc2socks
  Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.
  ☆177Updated 3 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆102Updated 2 years ago
• secdev-01 / AllTheThingsExec
  ☆130Updated this week
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆190Updated last year
• cwolff411 / powerob
  An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.
  ☆141Updated 2 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆64Updated 4 years ago
• slyd0g / WhiteChocolateMacademiaNut
  Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies
  ☆152Updated last year
• yoda66 / GoShellcode
  ☆71Updated 2 years ago
• X-C3LL / xlsxPoison
  Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)
  ☆142Updated 3 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆132Updated 3 years ago