improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys
☆49Mar 10, 2023Updated 3 years ago
Alternatives and similar repositories for smbdoor
Users that are interested in smbdoor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Feb 28, 2023Updated 3 years ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- Windows NTLMSSP library☆11Oct 13, 2020Updated 6 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆173Mar 15, 2023Updated 3 years ago
- ☆10Sep 11, 2026Updated last month
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Classic Bofa adapted to CobaltStrike.☆11Oct 4, 2022Updated 4 years ago
- A work in progress BOF/COFF loader in Rust☆51Mar 22, 2023Updated 3 years ago
- ☆18Mar 25, 2019Updated 7 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- DUQU MALWARE SOURCE + BINARY + More coming☆14Feb 6, 2023Updated 3 years ago
- 2022 Updated Kernelmode-Code☆31Mar 23, 2024Updated 2 years ago
- Small tool to play with IOCs caused by Imageload events☆47May 14, 2023Updated 3 years ago
- idk man this was the default github name☆34Apr 23, 2023Updated 3 years ago
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆307Oct 26, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- Client/server code that impersonates TLS 1.3 to disguise C2 activity.☆76Jul 25, 2022Updated 4 years ago
- Enumerate various traits from Windows processes as an aid to threat hunting☆198Jan 13, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- ETW based POC to identify direct and indirect syscalls☆197Apr 19, 2023Updated 3 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆13Mar 3, 2022Updated 4 years ago
- The code is a pingback to the Dark Vortex blog:☆191Jan 26, 2023Updated 3 years ago
- Infect Shared Files In Memory for Lateral Movement☆189Dec 14, 2022Updated 3 years ago
- Firefox webInjector capable of injecting codes into webpages using a mitmproxy.☆43Oct 30, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows CIFS/SMB packet generation and SMB networking library☆12Aug 25, 2020Updated 6 years ago
- Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD☆28Jan 4, 2024Updated 2 years ago
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆27Nov 14, 2025Updated 11 months ago
- A basic emulation of an "RPC Backdoor"☆241Aug 25, 2022Updated 4 years ago
- Replace the .txt section of the current loaded modules from \KnownDlls\☆307Sep 28, 2022Updated 4 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆142Sep 12, 2022Updated 4 years ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- Windows API Call Obfuscation☆112Dec 9, 2022Updated 3 years ago
- UPDATED 2022 Flame malware sourcecode available !! Forked. I will later provide my sample of Flame, Duqu and Gauss.☆20Mar 4, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆284Feb 24, 2025Updated last year
- The Definitive Guide To Process Cloning on Windows☆559Jan 3, 2024Updated 2 years ago
- ☆91Jun 2, 2024Updated 2 years ago
- x86 PE Mutator☆236Dec 24, 2022Updated 3 years ago
- ☆122Nov 21, 2024Updated last year
- CobaltStrike beacon in rust☆210Aug 10, 2024Updated 2 years ago
- Use GZip to compress your .NET assemblies for loading with AssemblyResolve.☆20Apr 11, 2014Updated 12 years ago