checkymander / MemScan
Quick Proof of Concept for reading a processes memory and searching for a specific string.
☆10Updated 5 years ago
Related projects: ⓘ
- C# code to run PIC using CreateThread☆16Updated 5 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆14Updated 5 years ago
- ☆14Updated 4 years ago
- Execute Shellcode And Other Goodies From MMC☆12Updated 9 years ago
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆31Updated 6 years ago
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 4 years ago
- ☆11Updated 4 years ago
- ☆14Updated 4 years ago
- C# DCOM Execution☆17Updated 5 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆29Updated 4 years ago
- CreateProcessAsUser experiments☆6Updated 8 years ago
- Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical she…☆19Updated 4 years ago
- Create COM Objects backed by Scripts, not DLLs☆9Updated 7 years ago
- C# Implementation of Get-VaultCredential☆13Updated 6 years ago
- Run Managed Assemblies with RunDll☆15Updated 6 years ago
- Miscellaneous PowerShell scripts for red team activities☆16Updated 3 weeks ago
- A C port of b33f's UrbanBishop☆35Updated 3 years ago
- Extended Process List (Search functionality)☆27Updated 3 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆20Updated 3 years ago
- A repo to hold any bypasses I work on/study/whatever☆18Updated 3 years ago
- ☆28Updated 6 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 5 years ago
- ☆19Updated this week
- ☆39Updated this week
- ☆10Updated this week
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆13Updated 6 years ago
- Loads .NET Assembly Via CLR Loader☆14Updated 5 years ago
- ☆26Updated 5 years ago
- Playing around with token manipulation in C#.☆28Updated 4 years ago
- ☆14Updated 4 years ago