aahmad097 / BadOutlook
(kinda) Malicious Outlook Reader
☆133Updated 3 years ago
Alternatives and similar repositories for BadOutlook:
Users that are interested in BadOutlook are comparing it to the libraries listed below
- Tool for interacting with outlook interop during red team engagements☆144Updated 3 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆121Updated 3 years ago
- ☆69Updated 3 years ago
- C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!☆182Updated 3 years ago
- Harvis is designed to automate your C2 Infrastructure.☆104Updated 2 years ago
- Pass the Hash to a named pipe for token Impersonation☆140Updated 3 years ago
- AMSI Bypass Via the Heap☆105Updated 4 years ago
- ☆162Updated 2 years ago
- Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus☆226Updated 2 years ago
- MSBuild without MSbuild.exe☆129Updated 4 years ago
- ☆92Updated 2 years ago
- Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments☆118Updated 3 years ago
- Python port of MailSniper to exfiltrate emails via EWS endpoint☆87Updated 2 years ago
- Convert Cobalt Strike profiles to IIS web.config files☆112Updated 3 years ago
- A fake AMSI Provider which can be used for persistence.☆141Updated 3 years ago
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆185Updated 3 years ago
- MiniDumpWriteDump behavior modification hook☆49Updated 3 years ago
- NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)☆114Updated last year
- ☆132Updated 4 years ago
- Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR☆98Updated 3 years ago
- New UAC bypass for Silent Cleanup for CobaltStrike☆190Updated 3 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆234Updated 3 years ago
- Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows☆142Updated 4 years ago
- Simple EDR implementation to demonstrate bypass☆163Updated 4 years ago
- Dump stuff without touching disk☆161Updated 4 years ago
- Collection of CobaltStrike beacon object files☆101Updated 2 years ago
- Spray a hash via smb to check for local administrator access☆140Updated 3 years ago
- Cobalt Strike Beacon Object Files☆158Updated 2 years ago
- C# version of Powermad☆158Updated last year
- C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread☆118Updated 5 years ago