it-gorillaz / lnk2pwn
Malicious Shortcut(.lnk) Generator
☆187Updated 6 years ago
Alternatives and similar repositories for lnk2pwn:
Users that are interested in lnk2pwn are comparing it to the libraries listed below
- Malicious Shortcut(.lnk) Generator☆77Updated 6 years ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆383Updated 10 months ago
- ☆358Updated 3 years ago
- Modular C# framework to exfiltrate loot over secure and trusted channels.☆122Updated 3 years ago
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆378Updated last year
- Run Powershell without software restrictions.☆284Updated 3 years ago
- Inject remote template link into word document for remote template injection☆165Updated 3 years ago
- ☆186Updated last week
- Tricks the target into enabling content (macros) with fake messages. Once enabled, uses macros to reduce the risk of suspision from targe…☆166Updated 3 years ago
- pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Blood…☆136Updated last year
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆197Updated 3 weeks ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆255Updated 2 years ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆317Updated 11 months ago
- Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for…☆468Updated last year
- Roast in the Middle☆287Updated 2 months ago
- Pass the Hash to a named pipe for token Impersonation☆298Updated last year
- PoC to coerce authentication from Windows hosts using MS-WSP☆229Updated last year
- Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.☆349Updated last year
- Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.☆271Updated 3 months ago
- Bypass AMSI by patching AmsiScanBuffer☆255Updated 3 years ago
- Shellcode launcher for AV bypass☆218Updated last year
- MS-FSRVP coercion abuse PoC☆282Updated 3 years ago
- Get fresh Syscalls from a fresh ntdll.dll copy☆226Updated 3 years ago
- Koppeling x Metatwin x LazySign☆205Updated 3 years ago
- An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.☆140Updated 3 years ago
- A User Impersonation tool - via Token or Shellcode injection☆407Updated 2 years ago
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆294Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆321Updated 6 months ago
- Run Rubeus via Rundll32☆199Updated 4 years ago
- An effort to track security vendors' use of Microsoft's Antimalware Scan Interface☆238Updated 2 years ago