Tylous / FaceDancerLinks
FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs by taking advantage of COM-based system DLL image loading
☆373Updated last year
Alternatives and similar repositories for FaceDancer
Users that are interested in FaceDancer are comparing it to the libraries listed below
Sorting:
- ☆335Updated last month
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆378Updated 9 months ago
- Python implementation of GhostPack's Seatbelt situational awareness tool☆265Updated 10 months ago
- yet another AV killer tool using BYOVD☆297Updated last year
- ☆287Updated 2 years ago
- ☆182Updated 3 months ago
- Leak of any user's NetNTLM hash. Fixed in KB5040434☆258Updated last year
- Evasive shellcode loader☆388Updated 11 months ago
- Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.☆228Updated 5 months ago
- Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8☆353Updated last year
- "AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS☆297Updated 5 months ago
- Ghosting-AMSI☆218Updated 5 months ago
- Continuous password spraying tool☆193Updated last week
- A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …☆168Updated 5 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆267Updated 3 months ago
- A Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTA…☆313Updated 5 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆351Updated 3 months ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆209Updated last year
- ☆203Updated last year
- A collection of all my personal cheat sheets and guides as I progress through my career in offensive security.☆241Updated 8 months ago
- Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST☆193Updated last year
- Nameless C2 - A C2 with all its components written in Rust☆275Updated last year
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆153Updated last year
- ☆189Updated last year
- Red teaming tool to dump LSASS memory, bypassing basic countermeasures.☆237Updated last week
- Open Source C&C Specification☆266Updated 7 months ago
- Amazing whoami alternatives☆141Updated last year
- ☆304Updated 6 months ago
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.☆339Updated last week
- Extracting NetNTLM without touching lsass.exe☆239Updated last year