dmcxblue / NtCreateUserProcessBOF
An Aggressor Script that utilizes NtCreateUserProcess to run binaries
☆25Updated last month
Alternatives and similar repositories for NtCreateUserProcessBOF:
Users that are interested in NtCreateUserProcessBOF are comparing it to the libraries listed below
- BOF for C2 framework☆40Updated 4 months ago
- Example of using Sleep to create better named pipes.☆41Updated last year
- Rewrite to fit my needs☆27Updated 8 months ago
- use python on windows with full submodule support without installation☆28Updated 2 months ago
- Hooked create process injection for meterpreter☆23Updated 3 years ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆19Updated 6 months ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆20Updated last year
- ☆25Updated 2 months ago
- Proxy function calls through the thread pool with ease☆23Updated last month
- Rust template/library for implementing your own COFF loader☆49Updated 2 months ago
- ☆28Updated 9 months ago
- in-process powershell runner for BRC4☆45Updated last year
- Creation and removal of Defender path exclusions and exceptions in C#.☆30Updated last year
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆33Updated last year
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 8 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆49Updated last year
- ☆25Updated 3 months ago
- Dump LSASS by spoofing command line arguments to procdump.☆19Updated 5 months ago
- ☆48Updated last year
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆22Updated last year
- Parser and reconciliation tooling for large Active Directory environments.☆30Updated last month
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆31Updated 10 months ago
- Files for http://blog.deniable.org/posts/windows-callbacks/☆12Updated 2 years ago
- A VSCode plugin to assist with BOF development.☆34Updated 7 months ago
- RunPE adapted for x64 and written in C, does not use RWX☆24Updated 10 months ago
- A simple rpc2socks alternative in pure Go.☆28Updated 8 months ago
- ☆20Updated 9 months ago
- Bunch of BOF files☆30Updated 3 months ago
- converts sRDI compatible dlls to shellcode☆22Updated 2 months ago
- ☆43Updated last year