Easy to extend initial access scenario to help with EDR testing on Linux and Mac
☆27Mar 20, 2022Updated 4 years ago
Alternatives and similar repositories for npm-initial-access
Users that are interested in npm-initial-access are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contains the technique presented at SOCON2025 for stealing cookies silently from MacOS Sequoia with only root privileges☆12Mar 27, 2025Updated last year
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 4 years ago
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- Remote detection of a user's AV using Flash☆12Jun 18, 2016Updated 10 years ago
- ☆12Jul 19, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Mini app using gevent, zmq and socketio☆12May 4, 2012Updated 14 years ago
- Insert the bitcoin blockchain data into elasticsearch☆15Feb 9, 2015Updated 11 years ago
- PHP runtime analysis toolset based on Xdebug☆13Mar 24, 2012Updated 14 years ago
- EDR/AV Simulation for Malware Development☆12Oct 21, 2023Updated 3 years ago
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- Scripts for MacOS related tasks.☆18Feb 16, 2020Updated 6 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- JVMTI agent, following the same pattern as the runtime-tracer☆12Feb 26, 2013Updated 13 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bro PCAP Processing and Tagging API☆28Nov 9, 2017Updated 8 years ago
- Open Source eBPF Malware Analysis Framework☆55Oct 20, 2024Updated 2 years ago
- The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application pen…☆10Jan 26, 2016Updated 10 years ago
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Feb 25, 2025Updated last year
- A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…☆34Apr 15, 2021Updated 5 years ago
- Medium post example file☆14Mar 18, 2023Updated 3 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Transparently call NTAPI via Halo's Gate with indirect syscalls.☆13Apr 26, 2024Updated 2 years ago
- OptFuzz: Optimization Path Guided Fuzzing for JavaScript JIT Compilers☆16Jun 14, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆13Jul 11, 2024Updated 2 years ago
- Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies☆44Sep 2, 2025Updated last year
- NTAPI hook bypass with (semi) legit stack trace☆18May 9, 2023Updated 3 years ago
- https://wojciechregula.blog/post/macos-red-teaming-get-ad-credentials-from-nomad/☆43Mar 4, 2022Updated 4 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- This batch script file wants to check your EDR systems detection and response capabilities in a more noisy way!☆12Jul 3, 2020Updated 6 years ago
- ☆12Apr 7, 2013Updated 13 years ago
- Download all the HIBP passwords☆12Apr 6, 2023Updated 3 years ago
- Read Windows message table entries.☆11Feb 5, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].☆158Mar 27, 2023Updated 3 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆16Jan 10, 2024Updated 2 years ago
- Tool to rip system and user data from OSX and macOS☆16Dec 6, 2022Updated 3 years ago
- kill AV/EDR☆17Jun 9, 2023Updated 3 years ago
- "Pure" powershell command (no dependencies, no special permissions etc') to retrieve change history in an AD group membership. relies on …☆12Nov 30, 2025Updated 11 months ago
- Set of utilities for getting information about Windows Events☆15Jun 5, 2018Updated 8 years ago
- ☆14Aug 21, 2022Updated 4 years ago