Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)
☆106Feb 10, 2021Updated 5 years ago
Alternatives and similar repositories for evading-autoruns
Users that are interested in evading-autoruns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- A WebDAV PROPFIND C2 tool☆120Aug 27, 2019Updated 7 years ago
- Tool written in python3 to determine where the AV signature is located in a binary/payload☆314Mar 24, 2018Updated 8 years ago
- A set of demos and a PowerShell module to interact with DotNetInterop.☆69Apr 7, 2018Updated 8 years ago
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Jun 8, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.☆176Sep 14, 2017Updated 9 years ago
- This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remo…☆54Jun 15, 2018Updated 8 years ago
- A WebSocket C2 Tool☆433Nov 24, 2017Updated 8 years ago
- Powershell-based Windows Security Auditing Toolbox☆571Jan 9, 2019Updated 7 years ago
- A proof of concept for the RDP Inception Attack☆355Jun 29, 2017Updated 9 years ago
- A C# implementation of the PowerShell Empire Agent☆73Apr 22, 2019Updated 7 years ago
- RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk: h…☆305Oct 18, 2017Updated 9 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago
- The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…☆374Nov 19, 2024Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Forward local or remote tcp ports through SMB pipes.☆294Mar 7, 2021Updated 5 years ago
- NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements☆94Sep 19, 2017Updated 9 years ago
- Exploit the credentials present in files and memory☆845May 25, 2023Updated 3 years ago
- ☆229May 10, 2018Updated 8 years ago
- morphHTA - Morphing Cobalt Strike's evil.HTA☆529Apr 14, 2023Updated 3 years ago
- A shellcode testing harness.☆69Jul 10, 2024Updated 2 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆321Jun 5, 2017Updated 9 years ago
- outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) a…☆126Sep 19, 2017Updated 9 years ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆633Jun 20, 2017Updated 9 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- HTA encryption tool for RedTeams☆1,428Nov 9, 2022Updated 3 years ago
- An interactive webshell and HTTP tunnel for TCP connections using chunked transfer encoding☆55Sep 20, 2018Updated 8 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆288Oct 31, 2018Updated 7 years ago
- Collection of PowerShell scripts☆450Dec 18, 2017Updated 8 years ago
- some pocs for antivirus evasion☆129Aug 28, 2023Updated 3 years ago
- PSAmsi is a tool for auditing and defeating AMSI signatures.☆398Apr 22, 2018Updated 8 years ago
- Malicious Macro Generator☆830Apr 17, 2019Updated 7 years ago
- ☆12Nov 24, 2016Updated 9 years ago
- Call your own DLL from VBA and execute code under process svchost.exe with WMI☆12Mar 6, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Example DLL to load from Windows NetShell☆183Sep 26, 2016Updated 10 years ago
- A collection of PowerShell Modules for BloodHound/Empire Orchestration☆109Sep 26, 2017Updated 9 years ago
- Social Engineering Abusing Google App Scripts☆24Jan 13, 2026Updated 9 months ago
- Easy installers for Maru OS.☆13May 19, 2019Updated 7 years ago
- A cobaltstrike script that integrates DDEAuto Attacks☆63Oct 17, 2017Updated 9 years ago
- ☆181Feb 21, 2022Updated 4 years ago
- Powershell C2 Server and Implants☆574Nov 11, 2019Updated 6 years ago