bohops / GhostBuildLinks
GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects
☆248Updated 4 years ago
Alternatives and similar repositories for GhostBuild
Users that are interested in GhostBuild are comparing it to the libraries listed below
Sorting:
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆252Updated 6 years ago
- Recon-AD, an AD recon tool based on ADSI and reflective DLL’s☆329Updated 5 years ago
- Lateral Movement technique using DCOM and HTA☆233Updated 2 years ago
- Macro-Enabled Excel File Generator (.xlsm) using the EPPlus Library.☆147Updated 4 years ago
- lateral movement techniques that can be used during red team exercises☆273Updated 5 years ago
- ☆347Updated 3 years ago
- Evading WinDefender ATP credential-theft☆256Updated 5 years ago
- StandIn is a small .NET35/45 AD post-exploitation toolkit☆257Updated 3 years ago
- Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors☆154Updated 6 years ago
- This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.☆202Updated 4 years ago
- Create a minidump of the LSASS process from memory☆261Updated 2 years ago
- The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification☆380Updated 5 years ago
- ☆162Updated 2 years ago
- Custom Metasploit post module to executing a .NET Assembly from Meterpreter session☆345Updated 4 years ago
- Run Rubeus via Rundll32☆202Updated 5 years ago
- Scripts for performing and detecting parent PID spoofing☆147Updated 5 years ago
- Check if MS-RPRN is remotely available with powershell/c#☆173Updated 6 years ago
- Assorted scripts and one off things☆270Updated 10 months ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆325Updated 6 years ago
- Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows☆143Updated 4 years ago
- Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…☆166Updated 4 years ago
- ☆185Updated 4 years ago
- ☆254Updated 6 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆217Updated 5 years ago
- The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.☆478Updated 3 years ago
- Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.☆296Updated 5 years ago
- A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.☆168Updated 3 years ago
- Presentation material presented by Outflank team members at public events.☆187Updated 6 months ago
- Asynchronous Password Spraying Tool in C# for Windows Environments☆314Updated last year
- Apply a filter to the events being reported by windows event logging☆262Updated 4 years ago