leftp / DPAPISnoop

Related projects ⓘ

Alternatives and complementary repositories for DPAPISnoop

• 0xthirteen / AssemblyHunter
  Find .net assemblies locally
  ☆92Updated 2 years ago
• n00py / GetFGPP
  Get Fine Grained Password Policy
  ☆65Updated 6 months ago
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆123Updated 8 months ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆76Updated this week
• rasta-mouse / SCMUACBypass
  ☆94Updated last year
• Crypt0s / DelegationBOF
  ☆138Updated 2 years ago
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆119Updated 3 years ago
• Wh04m1001 / DiagTrackEoP
  ☆89Updated 2 years ago
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆66Updated last year
• puzzlepeaches / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆35Updated last year
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆53Updated 2 years ago
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆170Updated 8 months ago
• X-C3LL / SharpNTLMRawUnHide
  C# version of NTLMRawUnHide
  ☆72Updated 2 years ago
• t94j0 / adexplorersnapshot-rs
  ☆66Updated 3 months ago
• morRubin / NegoExRelay
  ☆83Updated 2 years ago
• mgeeky / msi-shenanigans
  Proof of Concept code and samples presenting emerging threat of MSI installer files.
  ☆77Updated last year
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆77Updated last year
• mertdas / SharpLateral
  Lateral Movement
  ☆119Updated last year
• waawaa / AMSI_Rubeus_bypass
  ☆61Updated 2 years ago
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆104Updated last year
• wotwot563 / aad_prt_bof
  ☆73Updated 7 months ago
• trustedsec / CS_COFFLoader
  ☆122Updated 11 months ago
• bohops / DynamicDotNet
  A collection of various and sundry code snippets that leverage .NET dynamic tradecraft
  ☆135Updated 6 months ago
• mlcsec / ASRenum-BOF
  Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
  ☆138Updated 8 months ago
• 0xe7 / RoastInTheMiddle
  ☆68Updated last year
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆88Updated 10 months ago
• cybersectroll / SharpPersistSD
  ☆83Updated 6 months ago
• eversinc33 / Godmode
  Tool for playing with Windows Access Token manipulation.
  ☆52Updated last year
• netero1010 / Quser-BOF
  Cobalt Strike BOF for quser.exe implementation using Windows API
  ☆83Updated last year
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆134Updated last month