通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化
☆338Apr 10, 2022Updated 4 years ago
Alternatives and similar repositories for BypassUserAdd
Users that are interested in BypassUserAdd are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 使用多种WinAPI进行权限维持的CobaltStrike脚本,包含API设置系统服务,设置计划任务,管理用户等。☆552Jan 18, 2022Updated 4 years ago
- dump lsass进程工具☆556Jul 20, 2023Updated 3 years ago
- 帆软/致远密码解密工具☆362Jul 29, 2021Updated 5 years ago
- 替代PrintBug用于本地提权的新方式,主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆147Mar 13, 2022Updated 4 years ago
- 强制关闭360 需要管理员权限☆170Feb 6, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bypass AV 用户添加☆167Dec 30, 2021Updated 4 years ago
- 域控安全one for all☆738Sep 9, 2024Updated 2 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆774Jan 26, 2022Updated 4 years ago
- CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon,其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能☆728Sep 1, 2021Updated 5 years ago
- 一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webs…☆1,482Apr 25, 2024Updated 2 years ago
- 创建隐藏计划任务,权限维持,Bypass AV☆558Sep 1, 2021Updated 5 years ago
- 收集内存马打入方式☆507May 20, 2022Updated 4 years ago
- 获取服务器或域控登录日志☆278Sep 8, 2023Updated 3 years ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,270Jan 30, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 提取DC日志,快速获取域用户对应IP地址☆311Mar 21, 2022Updated 4 years ago
- 使用windows api添加用户,可用于net无法使用时. 分为nim版,c++版本,RDI版,BOF版。☆418Sep 29, 2021Updated 5 years ago
- RPC远程主机信息匿名扫描工具☆318Sep 30, 2022Updated 4 years ago
- 这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具,用于节省红队工作量,通过下载浏览器数据库、记录密钥来离线解密浏览器密码。☆631Apr 4, 2021Updated 5 years ago
- 远程创建任务计划工具☆187Apr 23, 2022Updated 4 years ago
- 利用白名单文件 cdb.exe 执行 shellcode☆213Jun 29, 2022Updated 4 years ago
- 冰蝎Java WebShell自动化免杀生成☆776Mar 15, 2022Updated 4 years ago
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- 域信息收集工具☆419Sep 16, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。☆109Jan 8, 2021Updated 5 years ago
- Token stealing tool written by Go. Bypass Kaspersky,Defender,Avira, etc./Go 编写的 Token 窃取工具。免杀卡巴、Defender、小红伞等杀软☆190Jan 16, 2025Updated last year
- Xshell全版本密码恢复工具☆948Jun 8, 2023Updated 3 years ago
- Windows rdp相关的登录记录导出工具,可用于后渗透中Windows服务器的信息收集阶段。输出内容包括:本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。☆285Jun 23, 2024Updated 2 years ago
- 防火墙出网探测工具,内网穿透型socks5代理☆269Nov 12, 2021Updated 4 years ago
- 泛微OA_V9全版本的SQL远程代码执行漏洞☆157Apr 20, 2022Updated 4 years ago
- 将dll exe 等转成shellcode 最后输出exe 可定制加载器模板 支持白文件的捆绑 shellcode 加密☆364Sep 8, 2022Updated 4 years ago
- WebSocket 内存马/Webshell,一种新型内存马/WebShell技术☆1,486Apr 10, 2023Updated 3 years ago
- 内网域渗透小工具☆732Apr 20, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 清除Go编译时自带的信息☆852Jul 20, 2022Updated 4 years ago
- 各种数据库的利用姿势☆1,030Jan 3, 2025Updated last year
- SharpSQLTools 和@Rcoil一起写的小工具,可上传下载文件,xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。☆974Aug 5, 2021Updated 5 years ago
- 冰蝎 哥斯拉 WebShell bypass☆770Jan 15, 2026Updated 9 months ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- 内存加载shellcode绕过waf☆206Jul 25, 2022Updated 4 years ago
- Erfrp-frp二开-免杀与隐藏☆633Dec 4, 2022Updated 3 years ago