casterbyte / Somerset
Offensive Router for Windows Pivoting
☆15Updated last week
Alternatives and similar repositories for Somerset:
Users that are interested in Somerset are comparing it to the libraries listed below
- Extension functionality for the NightHawk operator client☆26Updated last year
- .NET port of Leron Gray's azbelt tool.☆26Updated last year
- A pure C version of SymProcAddress☆25Updated 11 months ago
- Docker container for running CobaltStrike 4.10☆36Updated 5 months ago
- Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…☆19Updated last year
- Items related to the RedELK workshop given at security conferences☆28Updated last year
- ☆53Updated 4 months ago
- Just another Process Injection using Process Hollowing technique.☆16Updated last year
- Create PDFs with HTML smuggling attachments that save on opening the document.☆29Updated last year
- A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80☆19Updated last year
- A simple rpc2socks alternative in pure Go.☆28Updated 8 months ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆41Updated 7 months ago
- Unix Process hollowing in rust☆20Updated 2 months ago
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆31Updated 9 months ago
- Cobalt Strike BOFS☆15Updated last year
- Beacon Object Files used for Cobalt Strike☆17Updated last year
- PoC MSI payload based on ASEC/AhnLab's blog post☆23Updated 2 years ago
- ☆17Updated 2 months ago
- exfiltration/infiltration toolkit☆23Updated last year
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated last year
- Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.☆14Updated last year
- RCE PoC for Empire C2 framework <5.9.3☆26Updated last year
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 5 months ago
- ☆18Updated 5 months ago
- in-process powershell runner for BRC4☆44Updated last year
- A simple website to act as a store for havoc modules and extensions☆25Updated last month
- Identify binaries with Authenticode digital signatures signed to an internal CA/domain☆37Updated last year
- Make an Linux Kernel rootkit visible again.☆47Updated 2 weeks ago
- ☆28Updated last year