cinzinga / Evasion-Practice
A variety of AV evasion techniques written in C# for practice.
☆85Updated 3 years ago
Alternatives and similar repositories for Evasion-Practice:
Users that are interested in Evasion-Practice are comparing it to the libraries listed below
- AV EVASION TECHNIQUES☆77Updated 2 years ago
- Shellcode generation and encoding utility☆21Updated 2 years ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆127Updated last year
- Payload Generation Framework☆89Updated last year
- ☆31Updated 3 years ago
- Code dump from PEN-300/OSEP updated 2022☆40Updated 2 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆80Updated 3 years ago
- Bypass AMSI By Dividing files into multiple smaller files☆45Updated 2 years ago
- Patching AmsiOpenSession by forcing an error branching☆143Updated last year
- PoC to coerce authentication from Windows hosts using MS-WSP☆230Updated last year
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆169Updated 2 years ago
- A collection of code snippets built to assist with breaking chains.☆118Updated 11 months ago
- Lateral Movement☆123Updated last year
- ☆116Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆192Updated 5 months ago
- SeRestorePrivilege to SYSTEM☆95Updated 3 years ago
- A Python based ingestor for BloodHound☆83Updated 2 years ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆151Updated last year
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆102Updated 2 years ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆253Updated last year
- A tool to enumerate and exploit SQL Servers in AD☆34Updated last year
- ☆55Updated last year
- ADCS cert template modification and ACL enumeration☆135Updated last year
- Attempt at Obfuscated version of SharpCollection☆205Updated last month
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆91Updated 2 years ago
- The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.☆113Updated 4 years ago
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆137Updated 8 months ago
- ☆162Updated 7 months ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆106Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year