A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
☆88Oct 6, 2017Updated 9 years ago
Alternatives and similar repositories for WMI_Persistence
Users that are interested in WMI_Persistence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evil snippets of Underhanded Red Team tactics☆11Jul 5, 2017Updated 9 years ago
- HTTP/S Beaconing Implant☆312Aug 25, 2017Updated 9 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆172Jun 8, 2017Updated 9 years ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆632Jun 20, 2017Updated 9 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆868Jun 25, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python script to decode common encoded PowerShell scripts☆215Jun 13, 2018Updated 8 years ago
- Fileless SQL Server CLR-based Custom Stored Procedure Command Execution☆35Mar 6, 2017Updated 9 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆383Jun 25, 2024Updated 2 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆323Jun 5, 2017Updated 9 years ago
- A script made to validate numerous cryptographic-related vulnerabilities such as: Heartbleed, Logjam, CRIME,POODLE, DROWN, Weak Cipher Su…☆18Jul 25, 2016Updated 10 years ago
- A set of demos and a PowerShell module to interact with DotNetInterop.☆69Apr 7, 2018Updated 8 years ago
- ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.☆232Nov 17, 2017Updated 8 years ago
- Log newly created WMI consumers and processes to the Windows Application event log☆123Feb 28, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Command-line Interface for Binar.ly☆39Jan 13, 2017Updated 9 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago
- ☆52Sep 17, 2018Updated 8 years ago
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆109Jul 2, 2017Updated 9 years ago
- Monitor JSON notifications feed from VT☆17Jun 13, 2017Updated 9 years ago
- PowerShell Scripts focused on Post-Exploitation Capabilities☆320Dec 29, 2017Updated 8 years ago
- IR-Tools - PowerShell tools for IR☆130Jul 10, 2017Updated 9 years ago
- Cobalt Strike SCT payload obfuscator☆144Jul 7, 2017Updated 9 years ago
- Currently not updated for WMIEvent module...☆262Feb 23, 2016Updated 10 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Powershell module to assist in attacking Exchange/Outlook Web Access☆181Sep 22, 2016Updated 10 years ago
- Forward local or remote tcp ports through SMB pipes.☆295Mar 7, 2021Updated 5 years ago
- ☆17Jun 1, 2018Updated 8 years ago
- Port of eternal blue exploits to powershell☆152Jun 3, 2017Updated 9 years ago
- ☆79Sep 27, 2015Updated 11 years ago
- Network Mapping and Enumeration Framework☆22Nov 11, 2015Updated 10 years ago
- JavaScript Reversed TCP Meterpreter Stager☆138May 25, 2017Updated 9 years ago
- Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.☆48Jun 5, 2017Updated 9 years ago
- Use CLR to inject all the .NET apps☆183Apr 17, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PLASMA PULSAR☆69May 19, 2017Updated 9 years ago
- Automatically performs the SMB relay attack☆73May 13, 2016Updated 10 years ago
- ☆137Jul 13, 2017Updated 9 years ago
- InfoPath Phishing Repo Resource☆67Oct 26, 2017Updated 9 years ago
- Windows Event Log Killer☆1,809Sep 21, 2023Updated 3 years ago
- morphHTA - Morphing Cobalt Strike's evil.HTA☆531Apr 14, 2023Updated 3 years ago
- Collection of PowerShell scripts☆450Dec 18, 2017Updated 8 years ago