a short script to make my life easy : ) nothing more
☆13Jul 6, 2026Updated 4 months ago
Alternatives and similar repositories for elastic-detection-parser
Users that are interested in elastic-detection-parser are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 10 months ago
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 10 months ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- ☆14Oct 7, 2025Updated last year
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆66May 4, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- Remote process injection via TP_DIRECT.Callback hijack☆41Oct 30, 2026Updated last week
- CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM☆68Oct 30, 2026Updated last week
- Another Injection Technique which eliminates creations of thread in remote process☆29Jul 7, 2026Updated 4 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- Service Extender for notifying about AdaptixC2 events in Telegram, Slack, Rocket.Char, Discord, and any web platforms, such as ntfy.sh.☆22Mar 4, 2026Updated 8 months ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆37Oct 28, 2026Updated last week
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆141Oct 30, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Simple Windows shellcode loader with interesting evasion tricks☆15Apr 27, 2025Updated last year
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- ☆10May 26, 2026Updated 5 months ago
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆41Apr 14, 2026Updated 6 months ago
- ☆57Feb 12, 2026Updated 8 months ago
- Enhanced Evasion for Threadless Injections☆15May 29, 2026Updated 5 months ago
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆47Jun 18, 2026Updated 4 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆58Jul 8, 2026Updated 4 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy…☆29Sep 25, 2026Updated last month
- ☆28Oct 23, 2026Updated 2 weeks ago
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated 2 weeks ago
- Next-Generation BOF Template | BOF Linter | Obj Rewriter☆61Dec 4, 2025Updated 11 months ago
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 9 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Builds a synthetic stack using return address gadgets resolved from ntdll.dll functions. Syscall fires and returns cleanly with no user-…☆12Jun 5, 2026Updated 5 months ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 4 months ago
- Check if your AV/EDR does inline hooking, displays the hooked functions and allows you to compare them with the original ones.☆44Apr 2, 2026Updated 7 months ago
- A simple research-focused AES-based shellcode loader demonstrating in-memory execution and NTAPI techniques to help understand how custom…☆55Feb 19, 2026Updated 8 months ago
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆83Aug 22, 2026Updated 2 months ago
Are these results useful?