A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP
☆37Jul 27, 2021Updated 5 years ago
Alternatives and similar repositories for netntlm
Users that are interested in netntlm are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DLL Exports Extraction BOF with optional NTFS transactions.☆93Nov 5, 2021Updated 4 years ago
- ☆45Oct 16, 2023Updated 3 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- POC tools for exploring SMB over QUIC protocol☆131Apr 6, 2022Updated 4 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A C port of b33f's UrbanBishop☆38Oct 1, 2020Updated 6 years ago
- ☆273Jan 14, 2023Updated 3 years ago
- Get or remove RunMRU values☆62Dec 11, 2019Updated 6 years ago
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆114Aug 29, 2022Updated 4 years ago
- POC of a better implementation of GetProcAddress for ntdll using binary search☆114Apr 8, 2024Updated 2 years ago
- Are you forwarding DNS traffic to another server for some reason, but want to make sure only queries for certain names are passed? Say no…☆20Oct 16, 2022Updated 4 years ago
- A collection of scripts used to support an OffSecOps pipeline.☆15Jan 31, 2021Updated 5 years ago
- Offensive RPC PoC☆90Sep 29, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- My experience using Windows API for offensive purposes☆17Jul 10, 2021Updated 5 years ago
- all credits go to @mgeeky☆65Oct 14, 2021Updated 5 years ago
- ☆13Jul 30, 2021Updated 5 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆220Oct 8, 2020Updated 6 years ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆143Sep 29, 2021Updated 5 years ago
- Example of using Sleep to create better named pipes.☆40Jul 25, 2023Updated 3 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆111May 27, 2021Updated 5 years ago
- A BOF to interact with COM objects associated with the Windows software firewall.☆114Oct 10, 2021Updated 5 years ago
- MiniDumpWriteDump behavior modification hook☆50Feb 15, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- A simple BOF that frees UDRLs☆124May 29, 2022Updated 4 years ago
- LdrLoadDll Unhooking☆132Jan 16, 2022Updated 4 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- miscellaneous scripts and programs☆292May 13, 2026Updated 5 months ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- ☆155Jan 6, 2023Updated 3 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆117Sep 30, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Example code for using named pipe output with beacon ReflectiveDLLs☆118Jun 24, 2020Updated 6 years ago
- C# version of NTLMRawUnHide☆72Oct 8, 2022Updated 4 years ago
- BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs☆186Oct 3, 2021Updated 5 years ago
- ☆24Jul 29, 2021Updated 5 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- A small example of loading BOFs in Python with pure reflection☆19Jan 26, 2023Updated 3 years ago
- ☆60Jan 9, 2023Updated 3 years ago