anonymous300502 / Nuke-AMSI
NukeAMSI is a powerful tool designed to neutralize the Antimalware Scan Interface (AMSI) in Windows environments.
☆152Updated 3 months ago
Alternatives and similar repositories for Nuke-AMSI:
Users that are interested in Nuke-AMSI are comparing it to the libraries listed below
- Tool for Active Directory Certificate Services enumeration and abuse☆156Updated last week
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆197Updated 2 months ago
- Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data☆101Updated this week
- Weaponizing DCOM for NTLM Authentication Coercions☆206Updated 2 weeks ago
- psexecsvc - a python implementation of PSExec's native service implementation☆195Updated 2 months ago
- Make everyone in your VLAN ASRep roastable☆186Updated 2 months ago
- Windows remote execution multitool☆79Updated this week
- Continuous password spraying tool☆181Updated last month
- A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts☆145Updated last week
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆198Updated 10 months ago
- Find potential DLL Sideloads on your windows computer☆201Updated 3 months ago
- ☆215Updated 6 months ago
- Tool designed to find folder exclusions using Windows Defender using command line utility MpCmdRun.exe as a low privileged user, without …☆197Updated 6 months ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆183Updated 8 months ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆198Updated 6 months ago
- Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler☆100Updated 5 months ago
- Attempt at Obfuscated version of SharpCollection☆206Updated last week
- ☆276Updated last year
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆163Updated 4 months ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆298Updated 5 months ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆108Updated last year
- ☆201Updated last year
- Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the w…☆128Updated last year
- ☆170Updated 5 months ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆297Updated 5 months ago
- A PoC for Early Cascade process injection technique.☆176Updated 2 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆205Updated 2 weeks ago
- A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …☆161Updated 4 months ago
- Azure Post Exploitation Framework☆197Updated 2 months ago
- ☆156Updated last year