Wh04m1001 / RazerEoP

Related projects ⓘ

Alternatives and complementary repositories for RazerEoP

• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• Wh04m1001 / ZoneAlarmEoP
  Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV
  ☆26Updated 2 years ago
• xforcered / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆50Updated 2 years ago
• OtterHacker / Cerbere
  ☆46Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆51Updated last year
• S3cur3Th1sSh1t / SharpOxidResolver
  IOXIDResolver from AirBus Security/PingCastle
  ☆45Updated 3 years ago
• sneakid / DC30-PhineasTalk
  Slides for the talk we presented as UniPi at DefCon's Red Team Village
  ☆23Updated 2 years ago
• nettitude / SyscallsExtractor
  ☆23Updated 2 years ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆38Updated last year
• zimawhit3 / DynimicGhostWriting
  Windows x64 Process Injection via Ghostwriting with Dynamic Configuration
  ☆27Updated 3 years ago
• phackt / wptsextensions.dll
  WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.
  ☆51Updated 3 years ago
• synacktiv / AADOutsider-py
  Python3 rewrite of AsOutsider features of AADInternals
  ☆35Updated 2 months ago
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆45Updated last year
• kartikdurg / Enum-LSASS
  LSASS enumeration like pypykatz written in C-Lang
  ☆20Updated 2 years ago
• Allevon412 / BreadBear
  A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/
  ☆30Updated 8 months ago
• attl4s / freeMetsrvLoader
  freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package
  ☆34Updated last year
• dxxzero / rusty_drivers
  BYOVD collection
  ☆20Updated 8 months ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆51Updated last year
• Wh04m1001 / GamingServiceEoP5
  ☆27Updated 6 months ago
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆37Updated last year
• 3sjay / sploits
  some sploits
  ☆17Updated 2 months ago
• Wh04m1001 / UserManagerEoP
  ☆78Updated 7 months ago
• CodeXTF2 / evasion-adventures-files
  Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"
  ☆23Updated last year
• EgeBalci / syscall_api
  ☆36Updated last year