dfirfpi / dpapilabLinks
Windows DPAPI laboratory
☆94Updated 7 years ago
Alternatives and similar repositories for dpapilab
Users that are interested in dpapilab are comparing it to the libraries listed below
Sorting:
- A repository of some of my Windows 10 Device Guard Bypasses☆139Updated 8 years ago
- PoC dlls for Task Scheduler COM Hijacking☆95Updated 9 years ago
- Breaking the security of Microsoft's RMS☆56Updated 6 years ago
- VBS Reversed TCP Meterpreter Stager☆88Updated 8 years ago
- DPAPI offline decryption utility☆72Updated 3 years ago
- A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as th…☆100Updated 6 years ago
- few months old but better than nothing☆58Updated 3 years ago
- This is a Python port of lnk-parse-1.0, a tool to parse Windows .lnk files.☆80Updated 2 years ago
- ☆65Updated 9 years ago
- POSHSPY backdoor code☆45Updated 8 years ago
- windows-operating-system-archaeology @Enigma0x3 @subTee☆47Updated 8 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆169Updated 8 years ago
- PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.☆152Updated 6 years ago
- ☆80Updated 10 years ago
- DLL Password Filter Implant with Exfiltration Capabilities☆138Updated 5 years ago
- Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes☆62Updated 8 years ago
- A collection of tools to enumerate and analyse Windows DACLs☆109Updated 10 years ago
- A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.☆100Updated 7 years ago
- Shim database persistence (Fin7 TTP)☆37Updated 5 years ago
- A sample bot for Cobalt Strike 3☆22Updated 9 years ago
- ☆58Updated 4 years ago
- import pyd or execute PE all from memory using only pure python code and some shellcode tricks☆74Updated 8 years ago
- InsecurePowerShell is PowerShell with some security features removed.☆104Updated 8 years ago
- ☆50Updated 8 years ago
- Encode powershell payload into bat files☆155Updated 7 years ago
- Use bitsadmin to maintain persistence and bypass Autoruns☆66Updated 8 years ago
- ☆83Updated 9 years ago
- ☆29Updated 8 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆77Updated 7 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆88Updated 8 years ago