PoC to interact with local/remote registry hives through WMI
☆89Jun 14, 2020Updated 6 years ago
Alternatives and similar repositories for WMIReg
Users that are interested in WMIReg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Remotely enables Restricted Admin Mode☆214Sep 3, 2021Updated 5 years ago
- Coerce Windows machines auth via MS-EVEN☆174Jan 17, 2024Updated 2 years ago
- c# implementation of Active Directory Integrated DNS dumping (authenticated user)☆205May 25, 2021Updated 5 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- .NET Project for performing Authenticated Remote Execution☆410Feb 8, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.☆305Mar 4, 2020Updated 6 years ago
- Nim version of MDSec's Parallel Syscall PoC☆124Apr 4, 2026Updated 6 months ago
- Discover Printers☆173Sep 18, 2019Updated 7 years ago
- A BOF to interact with COM objects associated with the Windows software firewall.☆114Oct 10, 2021Updated 5 years ago
- The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.☆483May 24, 2022Updated 4 years ago
- Search files for extensions as well as text within.☆122Sep 28, 2021Updated 5 years ago
- ☆14Oct 25, 2019Updated 7 years ago
- A small .NET compression utility☆57Feb 2, 2022Updated 4 years ago
- Create a minidump of the LSASS process from memory☆257Nov 2, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Suite of Shellcode Running Utilities☆112Jan 30, 2020Updated 6 years ago
- Evading WinDefender ATP credential-theft☆257Dec 2, 2019Updated 6 years ago
- Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)☆197Feb 1, 2021Updated 5 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆118Sep 30, 2024Updated 2 years ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆97Apr 4, 2026Updated 6 months ago
- ☆24Feb 9, 2022Updated 4 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- .NET project for installing Persistence☆500Jun 26, 2024Updated 2 years ago
- MS-FSRVP coercion abuse PoC☆304Dec 30, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆247Mar 31, 2021Updated 5 years ago
- ☆188Jan 5, 2021Updated 5 years ago
- Remove API hooks from a Beacon process.☆283Sep 18, 2021Updated 5 years ago
- SMBExec C# module☆217Aug 21, 2020Updated 6 years ago
- Get or remove RunMRU values☆62Dec 11, 2019Updated 6 years ago
- ☆94May 14, 2022Updated 4 years ago
- Tool to create hidden registry keys.☆488Oct 23, 2019Updated 7 years ago
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆614Feb 16, 2023Updated 3 years ago
- SSDP Service Discovery☆17Dec 16, 2018Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆325Mar 26, 2019Updated 7 years ago
- Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…☆143Aug 16, 2021Updated 5 years ago
- Check for LDAP protections regarding the relay of NTLM authentication☆532Nov 19, 2024Updated last year
- ☆666Nov 17, 2021Updated 4 years ago
- GhostLoader - AppDomainManager - Injection - 攻壳机动队☆171May 27, 2020Updated 6 years ago
- ☆207May 1, 2020Updated 6 years ago
- A little tool to play with the Seclogon service☆326Jul 10, 2022Updated 4 years ago