PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer
☆35Sep 24, 2022Updated 4 years ago
Alternatives and similar repositories for Invoke-HiveNightmare
Users that are interested in Invoke-HiveNightmare are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Switch to JuicyPotato! https://github.com/decoder-it/juicy-potato☆12Feb 8, 2020Updated 6 years ago
- Halos Gate-based NTAPI Unhooker☆50Apr 21, 2022Updated 4 years ago
- Beacon Object File implementation of Yaxser's Backstab☆15Mar 9, 2022Updated 4 years ago
- A BOF tool that can be used to collect passwords using CredUIPromptForWindowsCredentialsName.☆17Jun 16, 2022Updated 4 years ago
- A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.☆133Oct 1, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)☆18May 2, 2026Updated 6 months ago
- Mimikatz embedded as classes☆27Oct 25, 2021Updated 5 years ago
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated last year
- A powershell script that performs reflective parent process ID (PPID) spoofing and process hollowing to evade Windows Defender☆11Feb 17, 2023Updated 3 years ago
- Python3 tool to perform password spraying using RDP☆17Aug 14, 2023Updated 3 years ago
- Docker container escape enumeration tool.☆12Jan 23, 2021Updated 5 years ago
- Port of the EDRSilencer tool (https://github.com/netero1010/EDRSilencer) to BOF format☆37Oct 22, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆27Sep 15, 2023Updated 3 years ago
- ☆37Feb 12, 2018Updated 8 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- VisualStudio port of https://github.com/guervild/BOFs/tree/dev/SilentLsassDump☆23Jul 6, 2023Updated 3 years ago
- MS-FSRVP coercion abuse PoC☆304Dec 30, 2021Updated 4 years ago
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆217May 3, 2023Updated 3 years ago
- .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac☆62Feb 16, 2023Updated 3 years ago
- Password attacks and MFA validation against various endpoints in Azure and Office 365☆153Feb 10, 2023Updated 3 years ago
- Collection of things I've written on pentests to make life easier.☆16Mar 14, 2019Updated 7 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- Library of BOFs to interact with SQL servers☆14Dec 6, 2024Updated last year
- The scrip will help you to find some values info for the user that you need as DFIR☆16Nov 3, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- PIC code gen and loading☆13Jul 25, 2017Updated 9 years ago
- ☆16Jun 16, 2021Updated 5 years ago
- ADFS Brute-Force Login Script☆11Mar 19, 2024Updated 2 years ago
- Tutorial covering how to discover DLLs for Hijacking and how to create proxy DLLS using Microsoft Teams as an example☆15Apr 7, 2021Updated 5 years ago
- Python implementation for PetitPotam☆226Oct 17, 2021Updated 5 years ago
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.☆12Sep 30, 2026Updated last month
- Check for LDAP protections regarding the relay of NTLM authentication☆532Nov 19, 2024Updated last year
- A webshell plugin and interactive shell for pentesting JoGet application.☆14May 19, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Pass the Hash to a named pipe for token Impersonation☆308Nov 29, 2023Updated 2 years ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- Beacon Object File to Enable Chrome DevTools Protocol (CDP)☆133Oct 17, 2026Updated 2 weeks ago
- MS15-076 Privilege Escalation☆16Aug 11, 2015Updated 11 years ago
- Compiled Binaries for Sharp Suite☆15Dec 28, 2019Updated 6 years ago
- My implementation of Halo's Gate technique in C#☆51Apr 20, 2022Updated 4 years ago
- One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html☆415Nov 10, 2024Updated last year