Indirect NT syscalls LSASS dumper.
☆47Jul 9, 2023Updated 3 years ago
Alternatives and similar repositories for NtDump
Users that are interested in NtDump are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small collection of Active Directory pentesting tools.☆33Jan 29, 2024Updated 2 years ago
- Use COM Component Bypass UAC,Dll Version☆36Apr 17, 2021Updated 5 years ago
- Remote Shellcode Injector☆219Aug 27, 2023Updated 3 years ago
- BypassCredGuard CS BOF☆55Jan 23, 2025Updated last year
- Tool to obtain hash using MS-SNTP for user accounts☆31Jan 22, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Exploitation of echo_driver.sys☆169Sep 16, 2023Updated 3 years ago
- Repository to gather the BOF files I will be developing☆12Oct 1, 2024Updated 2 years ago
- 个人学习使用，二开DcRAT，主要是增加了功能性插件☆16Jan 26, 2024Updated 2 years ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆109Nov 7, 2025Updated 11 months ago
- ☆32Aug 7, 2023Updated 3 years ago
- bypassuac、administrator->system提权的免杀小工具，可过Defender、360、卡巴等☆23Jan 1, 2023Updated 3 years ago
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- Native Syscalls Shellcode Injector☆265Jul 2, 2023Updated 3 years ago
- Silently Install Chrome Extension For Persistence☆102Jul 20, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆268Apr 8, 2025Updated last year
- ☆61Feb 10, 2022Updated 4 years ago
- A repository with my code snippets for research/education purposes.☆52Jul 28, 2023Updated 3 years ago
- Analyzes AdminSDHolder permissions & compares with default baseline or a previous run, to detect potential backdoor/excessive persistent …☆16Apr 8, 2025Updated last year
- Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.☆410Mar 16, 2026Updated 6 months ago
- Credential Guard Bypass Via Patching Wdigest Memory☆339Feb 3, 2023Updated 3 years ago
- just manipulatin these here tokens yes sir nothing weird☆21Apr 18, 2022Updated 4 years ago
- UAC bypass for x64 Windows 7 - 11（无弹窗版）☆272Sep 5, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆13Feb 25, 2023Updated 3 years ago
- An implementation of an indirect system call☆133Aug 25, 2023Updated 3 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆297Jul 15, 2023Updated 3 years ago
- Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime☆305Aug 2, 2023Updated 3 years ago
- A bunch of scripts and code i wrote.☆154Nov 7, 2024Updated last year
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- Post-Ex BOF tooling for Hannibal☆24Nov 20, 2024Updated last year
- Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemo…☆128Jan 18, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A RunAs clone with the ability to specify the password as an argument.☆111Jul 2, 2023Updated 3 years ago
- ☆30Jul 26, 2024Updated 2 years ago
- find dll base addresses without PEB WALK☆169Jul 13, 2025Updated last year
- Titan: A generic user defined reflective DLL for Cobalt Strike☆84Nov 20, 2022Updated 3 years ago
- Lateral Movement☆124Nov 14, 2023Updated 2 years ago
- A flexible tool that creates a minidump of the LSASS process☆13Jan 18, 2022Updated 4 years ago
- Azure APIs enumeration and abuse☆12Feb 26, 2026Updated 7 months ago