TwoSevenOneT / EDR-RedirLinks
EDR-Redir : a tool used to redirect the EDR's folder to another location.
☆163Updated 2 weeks ago
Alternatives and similar repositories for EDR-Redir
Users that are interested in EDR-Redir are comparing it to the libraries listed below
Sorting:
- A BOF to enumerate system process, their protection levels, and more.☆123Updated 11 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆105Updated 3 months ago
- Impersonate Tokens using only NTAPI functions☆82Updated 7 months ago
- A small How-To on creating your own weaponized WSL file☆119Updated 3 months ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆101Updated 7 months ago
- sideloading PoC using onedrive.exe & version.dll☆77Updated 3 weeks ago
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆97Updated 4 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆86Updated 8 months ago
- Find DLLs with RWX section☆80Updated 2 years ago
- .NET tool used to enrich RPC telemetry☆100Updated 5 months ago
- A Mythic agent for Windows written in C☆140Updated this week
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆75Updated last year
- Windows Thread Pool Injection Havoc Implementation☆32Updated last year
- ☆54Updated 5 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Updated last year
- Sniffing files generator☆59Updated 8 months ago
- Lateral movement with DCOM DLL hijacking☆167Updated 4 months ago
- ☆159Updated 11 months ago
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆132Updated 4 months ago
- ☆109Updated 9 months ago
- ☆115Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆126Updated last year
- ☆126Updated last year
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆51Updated 6 months ago
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆66Updated last year
- ☆136Updated 9 months ago
- Evasive Payload Delivery Server & C2 Redirector☆111Updated 2 weeks ago
- Lateral Movement via the .NET Profiler☆84Updated last year
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆115Updated last week
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆98Updated 2 years ago