Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.
☆274Apr 4, 2023Updated 3 years ago
Alternatives and similar repositories for wmiexec-RegOut
Users that are interested in wmiexec-RegOut are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2021-42287/CVE-2021-42278 exploits in powershell☆39Apr 4, 2022Updated 4 years ago
- 提取DC日志，快速获取域用户对应IP地址☆310Mar 21, 2022Updated 4 years ago
- A Bypass Anti-virus Software Lateral Movement Command Execution Tool☆1,463Jan 20, 2025Updated last year
- NTLM relay test.☆195Jun 26, 2025Updated last year
- Zerologon exploit with restore DC password automatically☆145Mar 15, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- New generation of wmiexec.py☆1,302Aug 28, 2026Updated last month
- c# implementation of Active Directory Integrated DNS dumping (authenticated user)☆203May 25, 2021Updated 5 years ago
- RPC远程主机信息匿名扫描工具☆318Sep 30, 2022Updated 4 years ago
- CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.☆1,416Dec 16, 2021Updated 4 years ago
- Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).☆834Dec 14, 2023Updated 2 years ago
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆368Dec 9, 2022Updated 3 years ago
- PrintNotifyPotato☆539Dec 2, 2022Updated 3 years ago
- 利用NTLM Hash读取Exchange邮件☆439Mar 23, 2026Updated 6 months ago
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆247Mar 31, 2021Updated 5 years ago
- Windows Token Stealing Expert☆495Nov 24, 2023Updated 2 years ago
- dump lsass进程工具☆556Jul 20, 2023Updated 3 years ago
- Msmap is a Memory WebShell Generator.☆581Apr 22, 2023Updated 3 years ago
- Memshell☆299Dec 7, 2021Updated 4 years ago
- 提取域控日志，支持远程提取☆169Mar 17, 2025Updated last year
- sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆712Aug 3, 2021Updated 5 years ago
- Misc TaskScheduler Plays☆237Sep 27, 2022Updated 4 years ago
- 这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。☆344May 22, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆534Nov 20, 2021Updated 4 years ago
- ☆180Feb 3, 2021Updated 5 years ago
- ☆294May 7, 2022Updated 4 years ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆387Sep 20, 2025Updated last year
- .NET Project for Attacking vCenter☆558Nov 11, 2021Updated 4 years ago
- Yet another SharpSphere☆228Aug 1, 2021Updated 5 years ago
- WINDOWS TELEMETRY权限维持☆256Jul 2, 2020Updated 6 years ago
- WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement☆372Dec 24, 2021Updated 4 years ago
- A wrapper of ldap_shell.py module which in ntlmrelayx☆62Sep 22, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆403Feb 6, 2023Updated 3 years ago
- 可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。☆263Nov 25, 2022Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆309Nov 29, 2023Updated 2 years ago
- MS-FSRVP coercion abuse PoC☆304Dec 30, 2021Updated 4 years ago
- 这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。☆631Apr 4, 2021Updated 5 years ago
- One-click injection into the SSHD process to record and send the password for ssh login☆430Aug 26, 2026Updated last month
- Windows活动目录中的LDAP信息收集工具☆234Oct 9, 2021Updated 5 years ago