entropy-z / PostEx-ArsenalLinks
Arsenal of modules to beacon postex
☆94Updated 2 months ago
Alternatives and similar repositories for PostEx-Arsenal
Users that are interested in PostEx-Arsenal are comparing it to the libraries listed below
Sorting:
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆128Updated 2 weeks ago
- Linker for Beacon Object Files☆149Updated this week
- PrimitiveInjection by using Read, Write and Allocation Primitives.☆53Updated 7 months ago
- TypeLib persistence technique☆139Updated last year
- ForsHops☆59Updated 10 months ago
- ☆100Updated 2 years ago
- ☆126Updated last year
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆190Updated last month
- converts sRDI compatible dlls to shellcode☆35Updated last year
- A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass☆165Updated 4 months ago
- ☆49Updated 9 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆184Updated 3 months ago
- NSecSoftBYOVD POC☆54Updated 4 months ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆63Updated last year
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆182Updated 3 weeks ago
- Threadless shellcode injection tool☆68Updated last year
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61Updated 8 months ago
- ☆100Updated last year
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆166Updated 8 months ago
- EmbedExeLnk by x86matthew modified by d4rkiZ☆42Updated 2 years ago
- Toolset to manipulate RPC clients by finding delayed services and masquerading as them☆107Updated 5 months ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆136Updated 5 months ago
- load shellcode without P/D Invoke and VirtualProtect call.☆165Updated 5 months ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆52Updated last week
- ☆21Updated 11 months ago
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆121Updated last month
- ☆106Updated last year
- A BOF that's a BOF Loader and more☆195Updated 3 weeks ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago
- Title is self explaining, well theres few methods we can do to read locked file and play with it...☆83Updated last month