cbwang505 / FilesystemEoPDesktopSystemShell
Folder Or File Delete to Get System Shell on Current Session Desktop
☆38Updated 2 months ago
Alternatives and similar repositories for FilesystemEoPDesktopSystemShell:
Users that are interested in FilesystemEoPDesktopSystemShell are comparing it to the libraries listed below
- use python on windows with full submodule support without installation☆28Updated 2 months ago
- ☆28Updated 10 months ago
- ☆28Updated 10 months ago
- BOF for C2 framework☆40Updated 4 months ago
- ☆52Updated 3 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆55Updated last month
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆31Updated 10 months ago
- DFSCoerce exe revisited version with custom authentication☆38Updated last year
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆14Updated 2 months ago
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆77Updated 7 months ago
- ☆48Updated last year
- Rust template/library for implementing your own COFF loader☆49Updated 2 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 8 months ago
- Parser and reconciliation tooling for large Active Directory environments.☆31Updated last month
- ☆54Updated 5 months ago
- ☆20Updated 3 weeks ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆46Updated 2 months ago
- ☆41Updated 8 months ago
- macOS dylib stager☆32Updated 2 months ago
- Section-based payload obfuscation technique for x64☆59Updated 7 months ago
- A proof-of-concept shellcode loader that leverages AI/ML face recognition models to verify the identity of a user on a target system☆37Updated 5 months ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆39Updated last year
- ☆25Updated 2 months ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆25Updated 9 months ago
- A simple rpc2socks alternative in pure Go.☆28Updated 8 months ago
- ☆85Updated 7 months ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆25Updated 2 months ago
- ☆30Updated 3 months ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆30Updated last year
- ☆79Updated 11 months ago