SafeBreach-Labs / RPC-RacerLinks
Toolset to manipulate RPC clients by finding delayed services and masquerading as them
☆106Updated 5 months ago
Alternatives and similar repositories for RPC-Racer
Users that are interested in RPC-Racer are comparing it to the libraries listed below
Sorting:
- A simple C++ Windows tool to get information about processes exposing named pipes.☆40Updated 11 months ago
- remote process injections using pool party techniques☆70Updated 7 months ago
- ☆64Updated last year
- lsassdump via RtlCreateProcessReflection and NanoDump☆84Updated last year
- ForsHops☆59Updated 10 months ago
- ☆100Updated last year
- Linker for Beacon Object Files☆147Updated this week
- ☆100Updated 2 years ago
- ☆100Updated last year
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆63Updated last year
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆60Updated last month
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- ☆35Updated last year
- Impersonate Tokens using only NTAPI functions☆83Updated 10 months ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆128Updated last week
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆85Updated 3 months ago
- Fairy Law - Compromise or disable EDR security solutions☆65Updated 2 months ago
- RPC to WebClient startup☆54Updated 5 months ago
- A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.☆85Updated 9 months ago
- Arsenal of modules to beacon postex☆94Updated 2 months ago
- UDC2 implementation that provides an ICMP C2 channel☆115Updated 2 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Updated last year
- ☆126Updated last year
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆121Updated last month
- ☆86Updated last year
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆61Updated 10 months ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Updated last year
- load shellcode without P/D Invoke and VirtualProtect call.☆166Updated 5 months ago
- a BOF implementation of various registry persistence methods☆94Updated 2 months ago