checkymander / MemScanLinks
Quick Proof of Concept for reading a processes memory and searching for a specific string.
☆10Updated 6 years ago
Alternatives and similar repositories for MemScan
Users that are interested in MemScan are comparing it to the libraries listed below
Sorting:
- ☆41Updated 5 years ago
- C# code to run PIC using CreateThread☆17Updated 6 years ago
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆32Updated 7 years ago
- PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.☆32Updated 6 years ago
- ☆14Updated 5 years ago
- Run Managed Assemblies with RunDll☆17Updated 7 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆12Updated 6 years ago
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 5 years ago
- ☆14Updated 5 years ago
- C# Implementation of Get-VaultCredential☆14Updated 6 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- Miscellaneous PowerShell scripts for red team activities☆16Updated 8 months ago
- ☆28Updated 7 years ago
- C# DCOM Execution☆18Updated 5 years ago
- Quick and dirty .net console app for querying mssql servers.☆20Updated 6 years ago
- Minimalist Custom .NET Core Garbage Collector☆21Updated 5 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆31Updated 5 years ago
- POC code to crash Windows Event Logger Service☆27Updated 4 years ago
- ☆33Updated 5 years ago
- Playing around with token manipulation in C#.☆28Updated 5 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 5 years ago
- ☆34Updated 6 years ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42Updated 6 years ago
- Hide .Net assembly into png images☆36Updated 5 years ago
- ☆18Updated 3 years ago
- Loads .NET Assembly Via CLR Loader☆16Updated 6 years ago
- Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical she…☆19Updated 5 years ago
- Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.☆23Updated 4 years ago
- Obtains a crackable hash for the current user account☆23Updated 6 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆20Updated 4 years ago