it-gorillaz / lnk2pwnLinks
Malicious Shortcut(.lnk) Generator
☆195Updated 6 years ago
Alternatives and similar repositories for lnk2pwn
Users that are interested in lnk2pwn are comparing it to the libraries listed below
Sorting:
- ☆391Updated 4 years ago
- Malicious Shortcut(.lnk) Generator☆85Updated 6 years ago
- Run Powershell without software restrictions.☆285Updated 3 years ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆256Updated 2 years ago
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆218Updated 3 months ago
- ☆201Updated last month
- Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.☆373Updated 2 years ago
- Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…☆232Updated last year
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆342Updated last year
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆392Updated last year
- COM Hijacking VOODOO☆299Updated 3 months ago
- Modular C# framework to exfiltrate loot over secure and trusted channels.☆128Updated 3 years ago
- Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic☆181Updated 2 months ago
- Collection of remote authentication triggers in C#☆492Updated last year
- Koppeling x Metatwin x LazySign☆213Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆302Updated last year
- Bypass AMSI by patching AmsiScanBuffer☆267Updated 4 years ago
- pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Blood…☆138Updated 2 years ago
- Tricks the target into enabling content (macros) with fake messages. Once enabled, uses macros to reduce the risk of suspision from targe…☆171Updated 3 months ago
- A C2 framework for initial access in Go☆186Updated 2 years ago
- A BOF to automate common persistence tasks for red teamers☆279Updated 2 years ago
- MS-FSRVP coercion abuse PoC☆291Updated 3 years ago
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆393Updated 3 months ago
- Creating a repository with all public Beacon Object Files (BoFs)☆506Updated last year
- An effort to track security vendors' use of Microsoft's Antimalware Scan Interface☆250Updated 3 years ago
- Get fresh Syscalls from a fresh ntdll.dll copy☆232Updated 3 years ago
- Remotely enables Restricted Admin Mode☆210Updated 3 years ago
- A User Impersonation tool - via Token or Shellcode injection☆416Updated 3 years ago
- Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.☆279Updated 7 months ago
- Patching AmsiOpenSession by forcing an error branching☆146Updated last year