hackerhouse-opensource / ArtilleryLinks
CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administrator.
☆177Updated last year
Alternatives and similar repositories for Artillery
Users that are interested in Artillery are comparing it to the libraries listed below
Sorting:
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆139Updated 3 weeks ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆148Updated last year
- ☆164Updated last year
- Command and Control (C2) framework☆130Updated 3 months ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated last year
- 「💀」Proof of concept on BYOVD attack☆161Updated 8 months ago
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆140Updated last year
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆153Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆192Updated 9 months ago
- Documents Exfiltration project for fun and educational purposes☆145Updated last year
- Collection of random RedTeam scripts.☆207Updated last year
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆154Updated last month
- ☆188Updated last year
- Local & remote Windows DLL Proxying☆165Updated last year
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆204Updated 2 years ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆47Updated last year
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆252Updated 4 months ago
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆192Updated last year
- This repository implements Threadless Injection in C☆172Updated last year
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆316Updated 2 years ago
- Sleep obfuscation☆231Updated 8 months ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆205Updated last year
- ☆157Updated 8 months ago
- ☆136Updated last year
- Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST☆192Updated 11 months ago
- Extracting NetNTLM without touching lsass.exe☆239Updated last year
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆194Updated 2 years ago
- A Mythic Agent written in PIC C.☆199Updated 6 months ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated last year
- ☆260Updated last year