jackson5sec / ShimDB
Shim database persistence (Fin7 TTP)
☆35Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for ShimDB
- ☆45Updated 6 years ago
- A C++ POC for process injection using NtCreateSectrion, NtMapViewOfSection and RtlCreateUserThread. Credit to @spotheplanet for his notes…☆42Updated 3 years ago
- Inject .Net payloads into other .Net assemblies on disk☆61Updated 4 years ago
- A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates☆24Updated 6 years ago
- ☆37Updated 5 years ago
- Babel-Shellfish deobfuscates and scans Powershell scripts on real-time right before each line execution.☆41Updated 6 years ago
- Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019.☆64Updated 5 years ago
- Windows Stagers to circumvent restrictive network environments☆63Updated last month
- few months old but better than nothing☆58Updated 2 years ago
- C++ POC code for the wlbsctrl.dll hijack on IKEEXT☆53Updated 5 years ago
- A tool to create COM class/interface relationships in neo4j☆47Updated 2 years ago
- Ps1jacker is a tool for generating COM Hijacking payload.☆61Updated 6 years ago
- ReaCOM has got a lot of tools to use and is related to component object model☆73Updated 4 years ago
- .NET tool for enumeration processes and dumping memory.☆56Updated 5 years ago
- POSHSPY backdoor code☆43Updated 7 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆75Updated 6 years ago
- Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …☆57Updated 5 years ago
- ☆53Updated 6 years ago
- Antivirus Emulator Fingerprints☆27Updated 6 years ago
- Tool for injecting a "TCP Relay" managed assembly into an unmanaged process☆63Updated 5 years ago
- Visual Studio (C++) Solution Template for Payloads☆18Updated 5 years ago
- ☆24Updated 6 years ago
- Community maintained list of most popular HIPS service and process names on a Windows Platform.☆43Updated 2 years ago
- Run Managed Assemblies with RunDll☆16Updated 6 years ago