NTFS parsing library in C#. Allows one to parse and read NTFS structures on disk.
☆34Jul 16, 2021Updated 5 years ago
Alternatives and similar repositories for NTFSCopy
Users that are interested in NTFSCopy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Execute commands in other Sessions☆95Jul 29, 2024Updated 2 years ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆88Jun 1, 2022Updated 4 years ago
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 6 years ago
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆284Feb 24, 2025Updated last year
- ☆48Feb 11, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Secretsdump C# version only supporting local (live) operation☆57Apr 20, 2025Updated last year
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆179Feb 14, 2023Updated 3 years ago
- ☆19Mar 16, 2021Updated 5 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆140Mar 3, 2025Updated last year
- A VSCode devcontainer for development of COFF files with batteries included.☆49Jul 10, 2023Updated 3 years ago
- Impersonate Tokens using only NTAPI functions☆85Apr 4, 2025Updated last year
- Tool to start processes as SYSTEM using token duplication☆36Oct 27, 2020Updated 6 years ago
- exfiltration/infiltration toolkit☆23Dec 20, 2023Updated 2 years ago
- AAD related enumeration in Nim☆133Sep 7, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple script to elevate current session to SYSTEM (needs to be run as Administrator)☆16Nov 11, 2024Updated last year
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆139Jun 16, 2024Updated 2 years ago
- ☆28May 1, 2023Updated 3 years ago
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- In-memory token vault BOF for Cobalt Strike☆152Aug 18, 2022Updated 4 years ago
- ☆15Oct 17, 2025Updated last year
- ☆180Feb 3, 2021Updated 5 years ago
- Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…☆238Sep 3, 2023Updated 3 years ago
- Coerce Windows machines auth via MS-EVEN☆174Jan 17, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆62May 12, 2025Updated last year
- An improvement and a different approach to Mockingjay Self-Injection.☆34May 21, 2024Updated 2 years ago
- Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215☆18Nov 17, 2022Updated 3 years ago
- 一键出网探测工具☆70Feb 25, 2023Updated 3 years ago
- Enumerate the Domain for Readable and Writable Shares☆24Oct 15, 2026Updated 2 weeks ago
- My implementation of the GIUDA project in C++☆189Jul 25, 2023Updated 3 years ago
- Port forwarding via MSRPC (445/tcp) [WIP]☆34Aug 26, 2021Updated 5 years ago
- Escalate Service Account To LocalSystem via Kerberos☆403Sep 14, 2023Updated 3 years ago
- Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.☆117Apr 22, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Simple Aggressor Scripts for Cobalt Strike☆13Sep 24, 2020Updated 6 years ago
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆43Dec 8, 2023Updated 2 years ago
- Remap ntdll.dll using only NTAPI functions with a suspended process☆29Apr 13, 2025Updated last year
- ☆52Dec 5, 2025Updated 10 months ago
- ☆22Sep 9, 2018Updated 8 years ago
- Click Once + App Domain☆69Feb 23, 2026Updated 8 months ago
- To audit the security of read-only domain controllers☆118Nov 27, 2023Updated 2 years ago