WiredPulse / Invoke-GhostLogLinks
Removal of certain event logs within a Windows OS
☆8Updated 5 years ago
Alternatives and similar repositories for Invoke-GhostLog
Users that are interested in Invoke-GhostLog are comparing it to the libraries listed below
Sorting:
- C# code to run PIC using CreateThread☆17Updated 6 years ago
- ☆25Updated 6 years ago
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 5 years ago
- simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe☆14Updated 8 years ago
- ☆28Updated 7 years ago
- ☆26Updated 6 years ago
- Run Managed Assemblies with RunDll☆17Updated 6 years ago
- ☆18Updated 7 years ago
- ☆10Updated 8 years ago
- A cross platform tool for verifying credentials and executing single commands☆32Updated 6 years ago
- SSDP Service Discovery☆17Updated 6 years ago
- A simple, minimal C# windows service implementation that can be used to demonstrate privilege escalation from misconfigured windows servi…☆16Updated 9 years ago
- Techniques that i have used to evade anti-virus during pen tests.☆13Updated 7 years ago
- ☆20Updated 6 years ago
- PoC code from blog☆16Updated 5 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆14Updated 7 years ago
- Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using e…☆53Updated last year
- Extracts Azure authentication tokens from PowerShell process minidumps.☆23Updated 2 years ago
- Babel-Shellfish deobfuscates and scans Powershell scripts on real-time right before each line execution.☆43Updated 6 years ago
- Create COM Objects backed by Scripts, not DLLs☆9Updated 7 years ago
- Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation☆25Updated 7 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆20Updated 4 years ago
- Bash one-liner that will parse harmj0y's SharpRoast or Rebeus kerberoast into hashcat crack-able format.☆32Updated 6 years ago
- ☆17Updated 6 years ago
- Modifies machine.config for persistence after installing signed .net assembly onto GAC☆13Updated 3 years ago
- Convert Empire profiles to Apache mod_rewrite scripts☆28Updated 5 years ago
- Mimikatz HashClash☆12Updated 10 years ago
- Python script to patch the reflective stub in a DLL☆24Updated 8 years ago
- Cobalt Strike log state tracking, parsing, and storage☆24Updated 5 years ago
- Obtains a crackable hash for the current user account☆23Updated 6 years ago