malcomvetter / WhoDisLinks
An example pattern in C# for watching security events (logon/logoff/privilege)
☆17Updated 7 years ago
Alternatives and similar repositories for WhoDis
Users that are interested in WhoDis are comparing it to the libraries listed below
Sorting:
- ☆42Updated 6 years ago
- C# Implementation of Get-VaultCredential☆14Updated 7 years ago
- ☆34Updated 7 years ago
- Inject .Net payloads into other .Net assemblies on disk☆61Updated 5 years ago
- ☆22Updated 7 years ago
- A C# DLL to Dump LSA Secrets☆58Updated 7 years ago
- C# code to run PIC using CreateThread☆17Updated 6 years ago
- Automate AV evasion by calling AMSI☆86Updated 2 years ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42Updated 6 years ago
- ☆26Updated 6 years ago
- Various C# projects for offensive security☆111Updated 5 years ago
- Implementation of the .NET Profiler DLL hijack in C#☆98Updated 6 years ago
- .NET tool for enumeration processes and dumping memory.☆57Updated 6 years ago
- Run Managed Assemblies with RunDll☆17Updated 7 years ago
- ☆69Updated 6 years ago
- PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.☆32Updated 7 years ago
- Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069☆36Updated 6 years ago
- Quick and dirty .net console app for querying mssql servers.☆20Updated 7 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆12Updated 6 years ago
- Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…☆93Updated 6 years ago
- C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.☆69Updated 4 years ago
- ☆28Updated 7 years ago
- ☆33Updated 6 years ago
- few months old but better than nothing☆58Updated 3 years ago
- External C2 Using IE COM Objects☆100Updated 6 years ago
- A C# implementation of the PowerShell Empire Agent☆73Updated 6 years ago
- Easily serve HTTP and DNS keys for proper payload protection☆59Updated 6 years ago
- ☆61Updated last year
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆32Updated 7 years ago
- A pattern for a self-installing Windows service in C# with the unstoppable attributes in C#.☆66Updated 6 years ago