A PoC WMI backdoor presented at Black Hat 2015
☆277Aug 10, 2015Updated 11 years ago
Alternatives and similar repositories for WMI_Backdoor
Users that are interested in WMI_Backdoor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆228Oct 14, 2018Updated 7 years ago
- ☆161Aug 28, 2015Updated 11 years ago
- A PowerShell Module Dedicated to Reverse Engineering☆902Aug 20, 2021Updated 5 years ago
- Position Independent Windows Shellcode Written in C☆298Aug 28, 2018Updated 8 years ago
- This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows O…☆301May 5, 2016Updated 10 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆386Jun 25, 2024Updated 2 years ago
- PowerShell Pass The Hash Utils☆1,808Dec 9, 2018Updated 7 years ago
- A simple shellcode runner☆23Apr 20, 2014Updated 12 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆866Jun 25, 2024Updated 2 years ago
- ☆435May 3, 2023Updated 3 years ago
- This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.☆687Oct 27, 2016Updated 9 years ago
- A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses☆116May 27, 2017Updated 9 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,550Aug 2, 2019Updated 7 years ago
- Exploit the credentials present in files and memory☆845May 25, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- random powershell goodness☆465Nov 21, 2024Updated last year
- Currently not updated for WMIEvent module...☆262Feb 23, 2016Updated 10 years ago
- My musings with PowerShell☆2,733Nov 19, 2021Updated 4 years ago
- ☆79Sep 27, 2015Updated 10 years ago
- PowerShell Scripts focused on Post-Exploitation Capabilities☆322Dec 29, 2017Updated 8 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- Connection-less Powershell Persistent and Resilient Backdoor☆231Sep 23, 2015Updated 10 years ago
- ☆137Jul 13, 2017Updated 9 years ago
- Random Tools☆852Oct 20, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- All materials from our Black Hat 2018 "Subverting Sysmon" talk☆134Aug 10, 2018Updated 8 years ago
- A framework for creating modular bots/backdoors☆21Jul 27, 2015Updated 11 years ago
- ☆128Jun 12, 2015Updated 11 years ago
- Learn from Casey Smith @subTee☆238Jul 18, 2017Updated 9 years ago
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 8 years ago
- Run PowerShell with rundll32. Bypass software restrictions.☆1,830Mar 17, 2021Updated 5 years ago
- EmPyre Web Interface☆12Mar 23, 2017Updated 9 years ago
- ☆121Oct 6, 2015Updated 10 years ago
- A PowerShell script to interact with the MITRE ATT&CK Framework via its own API☆367Feb 7, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.☆408Jul 14, 2016Updated 10 years ago
- A post-exploitation OS X/Linux agent written in Python 2.7☆872Aug 24, 2017Updated 9 years ago
- Port of eternal blue exploits to powershell☆151Jun 3, 2017Updated 9 years ago
- Module to provide PowerShell functions that abstract Win32 API functions☆253Jun 6, 2024Updated 2 years ago
- Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's po…☆3,942Jun 4, 2026Updated 3 months ago
- ☆30Jul 17, 2018Updated 8 years ago
- This repo contains Powershell scripts used for general hackery.☆582Dec 4, 2024Updated last year