bohops / DynamicDotNet
A collection of various and sundry code snippets that leverage .NET dynamic tradecraft
☆141Updated 10 months ago
Alternatives and similar repositories for DynamicDotNet:
Users that are interested in DynamicDotNet are comparing it to the libraries listed below
- C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.☆104Updated last year
- A C# tool to output crackable DPAPI hashes from user MasterKeys☆133Updated 6 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆112Updated last year
- Beacon Object File & C# project to check LDAP signing☆188Updated 7 months ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆91Updated 2 years ago
- Implant drop-in for EDR testing☆135Updated last year
- Simple BOF to read the protection level of a process☆115Updated last year
- Tool for playing with Windows Access Token manipulation.☆54Updated 2 years ago
- An example of using Syscalls in C# to get a meterpreter shell.☆108Updated 3 years ago
- Proof of Concept code and samples presenting emerging threat of MSI installer files.☆79Updated 2 years ago
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆176Updated last year
- ☆119Updated last year
- UI for creating LNKs☆102Updated 3 years ago
- Lateral Movement via the .NET Profiler☆79Updated 4 months ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆86Updated 2 years ago
- ☆115Updated 3 years ago
- Find .net assemblies locally☆108Updated 2 years ago
- Patch AMSI and ETW☆236Updated 10 months ago
- An App Domain Manager Injection DLL PoC on steroids☆167Updated last year
- A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading☆83Updated 2 years ago
- ☆181Updated last year
- Tool for viewing NTDS.dit☆150Updated 2 weeks ago
- ☆139Updated 2 years ago
- A C# Solution Source Obfuscator for avoiding AV signatures with minimal user interaction. Powered by the Roslyn C# library.☆73Updated last week
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆253Updated last year
- Slide decks and/or materials from conference presentations☆56Updated 2 years ago
- ☆88Updated 2 years ago
- RDLL for Cobalt Strike beacon to silence sysmon process☆87Updated 2 years ago
- ☆124Updated last year
- Investigation about ACL abusing for Active Directory Certificate Services (AD CS)☆121Updated 3 years ago