RayRRT / Active-Directory-Certificate-Services-abuse
☆42Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for Active-Directory-Certificate-Services-abuse
- Secretsdump C# version only supporting local (live) operation☆47Updated last year
- ☆77Updated last year
- Modified versions of the Cobalt Strike Process Injection Kit☆87Updated 9 months ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆72Updated last year
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆53Updated 2 years ago
- C# havoc implant☆96Updated last year
- ☆91Updated 8 months ago
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆13Updated 2 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆62Updated last year
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆115Updated last month
- ☆89Updated 2 years ago
- ☆59Updated 3 months ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆75Updated 6 months ago
- ☆117Updated last year
- ☆61Updated 2 years ago
- Execute commands in other Sessions☆79Updated 3 months ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆82Updated 2 years ago
- Automating payload generation for OSEP labs and exam.☆34Updated 2 years ago
- ☆138Updated 2 years ago
- Aggressor script add-in for CobaltStrike to track file uploads☆35Updated 2 years ago
- ☆61Updated 9 months ago
- ☆94Updated last year
- Active Directory certificate abuse.☆36Updated 2 years ago
- A collection of (even more) alternative shellcode callback methods in CSharp☆65Updated 2 weeks ago
- Lateral Movement via the .NET Profiler☆73Updated 5 months ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆86Updated 2 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆77Updated 2 years ago
- Simple .NET loader for loading and executing Powershell payloads☆14Updated 3 years ago
- ☆52Updated 7 months ago
- Library of BOFs to interact with SQL servers☆146Updated 5 months ago