eversinc33 / UnXorStringsNet
Deobfuscation of XorStringsNet
☆12Updated 4 months ago
Alternatives and similar repositories for UnXorStringsNet:
Users that are interested in UnXorStringsNet are comparing it to the libraries listed below
- Create PDFs with HTML smuggling attachments that save on opening the document.☆29Updated last year
- A collection of random small Aggressor snippets that don't warrant their own repo☆23Updated 2 years ago
- PoC MSI payload based on ASEC/AhnLab's blog post☆23Updated 2 years ago
- Items related to the RedELK workshop given at security conferences☆28Updated last year
- Example of using Sleep to create better named pipes.☆41Updated last year
- A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80☆19Updated last year
- ☆19Updated 4 months ago
- C# project to Reflectively load .Net assemblies in memory☆17Updated 9 months ago
- Mythic C2 wrapper for NimSyscallPacker☆23Updated 2 weeks ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33Updated 10 months ago
- ☆17Updated 3 months ago
- Extension functionality for the NightHawk operator client☆27Updated last year
- ☆47Updated 2 years ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆25Updated 2 months ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆20Updated last year
- Smuggle a file to a user's browser☆19Updated 2 years ago
- ☆48Updated last year
- .NET port of Leron Gray's azbelt tool.☆26Updated last year
- Scripts to interact with Microsoft Graph APIs☆36Updated 4 months ago
- Nemesis agent for Mythic☆27Updated 7 months ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆20Updated 2 years ago
- Python3 tool to perform password spraying using RDP☆16Updated last year
- ☆16Updated last month
- Extension functionality for the NightHawk operator client☆27Updated last year
- Simple reverse ICMP shell☆13Updated 11 months ago
- Rewrite to fit my needs☆27Updated 8 months ago
- BOF for C2 framework☆40Updated 4 months ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆41Updated 8 months ago
- A small example of loading BOFs in Python with pure reflection☆19Updated 2 years ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆32Updated 2 years ago