hausec / MaliciousClickOnceMSBuild
Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.
☆91Updated 4 years ago
Alternatives and similar repositories for MaliciousClickOnceMSBuild:
Users that are interested in MaliciousClickOnceMSBuild are comparing it to the libraries listed below
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆124Updated 3 years ago
- ☆93Updated 3 years ago
- MiniDumpWriteDump behavior modification hook☆50Updated 4 years ago
- C# port of the Get-AppLockerPolicy PS cmdlet☆99Updated 2 years ago
- A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …☆85Updated 5 years ago
- A little scanner to check the LDAP Signing state☆46Updated 3 years ago
- Tool for interacting with outlook interop during red team engagements☆144Updated 3 years ago
- ☆70Updated 3 years ago
- juicypotato for win10 > 1803 & win server 2019☆97Updated 4 years ago
- Add SD for controlled computer object to a target object for RBCD using LDAP☆38Updated 3 years ago
- Service Enumeration C# .NET Assembly☆58Updated 3 years ago
- ☆46Updated 3 years ago
- ☆69Updated 4 years ago
- ☆53Updated 4 years ago
- Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…☆71Updated 4 years ago
- .NET 4.0 Scheduled Job Lateral Movement☆90Updated 4 years ago
- Load C# Code straight to memory☆54Updated 4 years ago
- PoC to interact with local/remote registry hives through WMI☆85Updated 4 years ago
- ☆94Updated 2 years ago
- Outlook persistence using VSTO add-ins☆87Updated 4 years ago
- Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.☆37Updated 5 years ago
- AMSI Bypass Via the Heap☆107Updated 4 years ago
- Pass the Hash to a named pipe for token Impersonation☆143Updated 3 years ago
- Port of Invoke-Excel4DCOM☆105Updated 5 years ago
- A Cobalt Strike Aggressor script to generate GadgetToJScript payloads☆102Updated 4 years ago
- Checks for signature requirements over LDAP☆97Updated 2 years ago
- MSBuild without MSbuild.exe☆132Updated 4 years ago
- ☆55Updated 3 years ago
- C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll☆58Updated 6 years ago
- A BOF to interact with COM objects associated with the Windows software firewall.☆103Updated 3 years ago