☆88Sep 21, 2026Updated last month
Alternatives and similar repositories for SrHollow
Users that are interested in SrHollow are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆95Aug 5, 2026Updated 3 months ago
- ☆63Aug 27, 2026Updated 2 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆87Oct 23, 2026Updated 2 weeks ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆114Oct 6, 2026Updated last month
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- ☆40Sep 25, 2026Updated last month
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆139Oct 30, 2026Updated last week
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆49Oct 18, 2026Updated 2 weeks ago
- Beacon Object File implementation of mimikatz leveraging the Process Hollowing technique☆42Jun 29, 2026Updated 4 months ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆68Sep 17, 2026Updated last month
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆151Oct 7, 2026Updated 3 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆94Updated this week
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- ☆37May 19, 2026Updated 5 months ago
- A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall☆41Oct 17, 2026Updated 3 weeks ago
- krbrelayx fork that defeats enforced SMB signing on an SMB relay (opt-in --reauth-bypass).☆78Oct 21, 2026Updated 2 weeks ago
- ☆14Apr 9, 2026Updated 6 months ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆70Oct 7, 2026Updated 3 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆58Jul 8, 2026Updated 3 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆296Jun 22, 2026Updated 4 months ago
- Python scripts that helps in the development of PPKG binaries☆16Jul 31, 2026Updated 3 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- Snaffler in Python☆123Oct 1, 2026Updated last month
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆132Dec 7, 2025Updated 10 months ago
- ☆56Sep 18, 2026Updated last month
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- A collection of techniques for process injection on Windows☆105Aug 16, 2026Updated 2 months ago
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 3 months ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.☆17Sep 27, 2026Updated last month