cinzinga / Evasion-Practice
A variety of AV evasion techniques written in C# for practice.
☆88Updated 4 years ago
Alternatives and similar repositories for Evasion-Practice:
Users that are interested in Evasion-Practice are comparing it to the libraries listed below
- Payload Generation Framework☆91Updated last year
- AV EVASION TECHNIQUES☆79Updated 2 years ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆133Updated last year
- ☆31Updated 3 years ago
- Code dump from PEN-300/OSEP updated 2022☆40Updated 2 years ago
- A collection of code snippets built to assist with breaking chains.☆117Updated 11 months ago
- Shellcode generation and encoding utility☆21Updated 2 years ago
- SeRestorePrivilege to SYSTEM☆105Updated 3 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆108Updated last year
- PoC to coerce authentication from Windows hosts using MS-WSP☆235Updated last year
- The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.☆119Updated 4 years ago
- Patching AmsiOpenSession by forcing an error branching☆145Updated last year
- ☆117Updated 3 weeks ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆254Updated last year
- ☆164Updated 8 months ago
- Identifies the bytes that Microsoft Defender flags on.☆84Updated 2 years ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆197Updated 6 months ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆106Updated 2 years ago
- Attempt at Obfuscated version of SharpCollection☆206Updated this week
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆171Updated 2 years ago
- Bypass AMSI By Dividing files into multiple smaller files☆45Updated 2 years ago
- OPSEC safe Kerberoasting in C#☆191Updated 2 years ago
- ☆141Updated 2 years ago
- Patch AMSI and ETW☆236Updated 11 months ago
- ADCS cert template modification and ACL enumeration☆136Updated last year
- Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…☆100Updated 2 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆81Updated 3 years ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆298Updated 5 months ago
- ☆159Updated 5 months ago
- ☆48Updated 2 years ago