irsl / microsoft-diagcab-rce-poc
Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution
☆22Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for microsoft-diagcab-rce-poc
- Core bypass Windows Defender and execute any binary converted to shellcode☆43Updated 3 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆30Updated 8 months ago
- Alternative Mimikatz LSASS DUMPER☆12Updated 4 years ago
- A compilation of Aggressor/Sleep scripts for operational purposes that I've made.☆11Updated 3 years ago
- Cobalt Strike Get clipboard plugin☆12Updated last year
- Slides from out talk at BH IL 2022☆27Updated 2 years ago
- Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets☆48Updated 3 years ago
- Ntdll Unhooking POC☆19Updated 2 years ago
- ☆18Updated 2 years ago
- Run PowerShell command without invoking powershell.exe☆35Updated 2 years ago
- Execute Mimikatz with different technique☆50Updated 3 years ago
- Windows File Enumeration Intel Gathering Tool.☆17Updated last year
- C# .Net 5.0 project to build BOF (Beacon Object Files) in mass☆26Updated last year
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆14Updated 3 years ago
- A little implant which SSH's back with a shell☆36Updated 2 years ago
- treafik fronted c2 examples☆26Updated 3 years ago
- Repository for dirty scripts and PoCs☆16Updated last year
- Beacon payload using AV bypass method from https://github.com/fullmetalcache/CsharpMMNiceness and shellcode generated from https://github…☆20Updated 3 years ago
- A simple BOF implementation of klist using Windows API☆30Updated 2 years ago
- ☆19Updated 2 years ago
- This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…☆23Updated 2 years ago
- Source Code Management Attack Toolkit☆10Updated 2 years ago
- ☆24Updated last year
- Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…☆37Updated 4 years ago
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆21Updated last year
- Remotely dump NT hashes through Windows Crash dumps☆26Updated 3 weeks ago
- A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.☆18Updated 3 years ago
- Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability☆25Updated 4 years ago