jeperez / windows-operating-system-archaeology
windows-operating-system-archaeology @Enigma0x3 @subTee
☆45Updated 7 years ago
Alternatives and similar repositories for windows-operating-system-archaeology:
Users that are interested in windows-operating-system-archaeology are comparing it to the libraries listed below
- Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes☆61Updated 7 years ago
- ☆25Updated 6 years ago
- Fileless SQL Server CLR-based Custom Stored Procedure Command Execution☆35Updated 8 years ago
- Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting☆41Updated 6 years ago
- B-Sides CBR 2018 talk about group policy and Grouper☆39Updated 5 years ago
- Babel-Shellfish deobfuscates and scans Powershell scripts on real-time right before each line execution.☆42Updated 6 years ago
- ☆26Updated 6 years ago
- Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …☆58Updated 6 years ago
- Environmental (and http) keying for scripting languages☆39Updated 6 years ago
- Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using e…☆52Updated 11 months ago
- ☆21Updated 7 years ago
- Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.☆31Updated 8 years ago
- Powershell Persistence Locator☆66Updated 8 years ago
- Run multiple PowerShell scripts concurrently in different app domains!☆35Updated 9 years ago
- When CactusTorch meets WebDavDelivery and obfuscation☆63Updated 7 years ago
- Slack/Microsoft Teams notification for new Empire/Meterpreter checkins☆24Updated 4 months ago
- ☆63Updated 8 years ago
- SilkETW & SilkService☆40Updated 5 years ago
- Set of ultra technical notes about AD☆18Updated 6 years ago
- A simple reflective dll example☆19Updated 8 years ago
- A set of compiled application restriction bypasses☆29Updated 8 years ago
- Scripts for automating actions in Cobalt Strike☆11Updated 8 years ago
- .NET tool for enumeration processes and dumping memory.☆56Updated 5 years ago
- Run Managed Assemblies with RunDll☆17Updated 6 years ago
- This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remo…☆51Updated 6 years ago
- Microsoft Flow Attack Framework☆23Updated 5 years ago
- ☆30Updated 6 years ago
- Mimikatz HashClash☆12Updated 9 years ago
- Cobalt Strike log state tracking, parsing, and storage☆23Updated 5 years ago
- Apfell C2 Server for the Google Chrome Extension Payload☆11Updated 4 years ago