gatariee / WintonLinks
Command and Control (C2) framework
☆126Updated 2 months ago
Alternatives and similar repositories for Winton
Users that are interested in Winton are comparing it to the libraries listed below
Sorting:
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆147Updated last year
- Two in one, patch lifetime powershell console, no more etw and amsi!☆92Updated 2 months ago
- 「💀」Proof of concept on BYOVD attack☆161Updated 7 months ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Updated 3 months ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated last year
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆153Updated last year
- Adversary Emulation Framework☆119Updated 2 weeks ago
- Automated .NET AppDomain hijack payload generation☆126Updated 5 months ago
- Evasive Golang Loader☆132Updated 11 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆91Updated last year
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆139Updated 11 months ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆168Updated 4 months ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆132Updated 8 months ago
- Stage 0☆161Updated 6 months ago
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆129Updated 3 weeks ago
- This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.☆72Updated 2 months ago
- Documents Exfiltration project for fun and educational purposes☆145Updated last year
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- Create Anti-Copy DRM Malware☆59Updated 10 months ago
- Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks☆111Updated 6 months ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆97Updated last year
- Bypass the Event Trace Windows(ETW) and unhook ntdll.☆103Updated last year
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated last year
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆119Updated last year
- ☆119Updated last year
- Local & remote Windows DLL Proxying☆165Updated last year
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆202Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated last year
- Inject RDPThief into memory with PowerShell.☆64Updated 5 months ago
- PoC for dumping and decrypting cookies in the latest version of Microsoft Teams☆132Updated last year