Apply a filter to the events being reported by windows event logging
☆262Apr 24, 2021Updated 5 years ago
Alternatives and similar repositories for EvtMute
Users that are interested in EvtMute are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evade sysmon and windows event logging☆626Apr 8, 2020Updated 6 years ago
- nuke that event log using some epic dinvoke fu☆116May 12, 2021Updated 5 years ago
- .Net Assembly to block ETW telemetry in current process☆78May 14, 2020Updated 6 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆126May 22, 2021Updated 5 years ago
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆614Feb 16, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆246Jul 14, 2021Updated 5 years ago
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆217May 3, 2023Updated 3 years ago
- .NET Project for Attacking vCenter☆558Nov 11, 2021Updated 4 years ago
- Self-developed tools for Lateral Movement/Code Execution☆722Aug 17, 2021Updated 5 years ago
- A collection of tools to abuse chrome browser☆300Jan 15, 2021Updated 5 years ago
- Tool for interacting with outlook interop during red team engagements☆145Jun 29, 2021Updated 5 years ago
- C# Based Universal API Unhooker☆408Feb 18, 2022Updated 4 years ago
- C# port of the Get-AppLockerPolicy PS cmdlet☆97Dec 8, 2022Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆307Nov 29, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- NTLM relaying for Windows made easy☆588Apr 25, 2023Updated 3 years ago
- Collection of beacon BOF written to learn windows and cobaltstrike☆360Feb 24, 2023Updated 3 years ago
- SharpBuster is a C# implementation of a directory brute forcing tool. It's designed to be used via Cobalt Strike's execute-assembly and s…☆64Sep 2, 2020Updated 6 years ago
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆1,172Mar 31, 2021Updated 5 years ago
- LoadLibrary for offensive operations☆1,192Oct 22, 2021Updated 5 years ago
- Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS head…☆598Jul 26, 2021Updated 5 years ago
- Tool to create hidden registry keys.☆488Oct 23, 2019Updated 7 years ago
- UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …☆348Jul 3, 2022Updated 4 years ago
- C# port of WMImplant which uses either CIM or WMI to query remote systems☆204Jul 14, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆180Feb 3, 2021Updated 5 years ago
- Remove API hooks from a Beacon process.☆283Sep 18, 2021Updated 5 years ago
- YouTube/Livestream project for obfuscating C# source code using Roslyn☆128May 9, 2021Updated 5 years ago
- Companion PoC for the "Adventures in Dynamic Evasion" blog post☆127May 25, 2021Updated 5 years ago
- Shellcode injector using direct syscalls☆123Aug 17, 2020Updated 6 years ago
- Zipper, a CobaltStrike file and folder compression utility.☆222Jan 18, 2020Updated 6 years ago
- ☆99Sep 20, 2021Updated 5 years ago
- Load .net assemblies from memory while having them appear to be loaded from an on-disk location.☆172May 5, 2021Updated 5 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆220Oct 8, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Ps-Tools, an advanced process monitoring toolkit for offensive operations☆354Dec 1, 2020Updated 5 years ago
- D/Invoke port of UrbanBishop☆109Jul 19, 2020Updated 6 years ago
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆878Mar 20, 2023Updated 3 years ago
- Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)☆325Nov 9, 2021Updated 4 years ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆296Aug 18, 2023Updated 3 years ago
- PIC lsass dumper using cloned handles☆598Oct 18, 2022Updated 4 years ago
- Dump the memory of a PPL with a userland exploit☆892Jul 24, 2022Updated 4 years ago