XiaoliChan / wmiexec-RegOutView external linksLinks
Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.
☆278Apr 4, 2023Updated 2 years ago
Alternatives and similar repositories for wmiexec-RegOut
Users that are interested in wmiexec-RegOut are comparing it to the libraries listed below
Sorting:
- A Bypass Anti-virus Software Lateral Movement Command Execution Tool☆1,465Jan 20, 2025Updated last year
- 提取DC日志,快速获取域用户对应IP地址☆308Mar 21, 2022Updated 3 years ago
- Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).☆817Dec 14, 2023Updated 2 years ago
- NTLM relay test.☆195Jun 26, 2025Updated 7 months ago
- Windows Token Stealing Expert☆484Nov 24, 2023Updated 2 years ago
- Zerologon exploit with restore DC password automatically☆142Mar 15, 2024Updated last year
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆252Mar 31, 2021Updated 4 years ago
- CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.☆1,397Dec 16, 2021Updated 4 years ago
- New generation of wmiexec.py☆1,255Jan 5, 2026Updated last month
- RPC远程主机信息匿名扫描工具☆317Sep 30, 2022Updated 3 years ago
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆372Dec 9, 2022Updated 3 years ago
- PrintNotifyPotato☆539Dec 2, 2022Updated 3 years ago
- c# implementation of Active Directory Integrated DNS dumping (authenticated user)☆205May 25, 2021Updated 4 years ago
- 利用NTLM Hash读取Exchange邮件☆441Jan 7, 2025Updated last year
- Msmap is a Memory WebShell Generator.☆585Apr 22, 2023Updated 2 years ago
- dump lsass进程工具☆561Jul 20, 2023Updated 2 years ago
- sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。☆717Aug 3, 2021Updated 4 years ago
- Exchange 服务器安全性的辅助测试工具☆332Jul 21, 2023Updated 2 years ago
- ☆539Nov 20, 2021Updated 4 years ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆372Sep 20, 2025Updated 4 months ago
- .NET Project for Attacking vCenter☆553Nov 11, 2021Updated 4 years ago
- Yet another SharpSphere☆227Aug 1, 2021Updated 4 years ago
- CVE-2021-42287/CVE-2021-42278 exploits in powershell☆38Apr 4, 2022Updated 3 years ago
- Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)☆560Dec 7, 2023Updated 2 years ago
- WINDOWS TELEMETRY权限维持☆258Jul 2, 2020Updated 5 years ago
- MS-FSRVP coercion abuse PoC☆305Dec 30, 2021Updated 4 years ago
- Memshell☆292Dec 7, 2021Updated 4 years ago
- WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement☆369Dec 24, 2021Updated 4 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆400Feb 6, 2023Updated 3 years ago
- Credential Guard Bypass Via Patching Wdigest Memory☆335Feb 3, 2023Updated 3 years ago
- ☆181Feb 3, 2021Updated 5 years ago
- Pass the Hash to a named pipe for token Impersonation☆313Nov 29, 2023Updated 2 years ago
- Use to check the valid account of the Remote Desktop Protocol(Support plaintext and ntlmhash)☆165May 14, 2020Updated 5 years ago
- 提取域控日志,支持远程提取☆171Mar 17, 2025Updated 10 months ago
- Misc TaskScheduler Plays☆238Sep 27, 2022Updated 3 years ago
- TCP Port Redirection Utility☆760Jan 31, 2023Updated 3 years ago
- ☆667Nov 17, 2021Updated 4 years ago
- 域控安全one for all☆736Sep 9, 2024Updated last year
- 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。☆339May 22, 2023Updated 2 years ago