mertdas / PrivKitLinks
PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.
☆431Updated last year
Alternatives and similar repositories for PrivKit
Users that are interested in PrivKit are comparing it to the libraries listed below
Sorting:
- Terminate AV/EDR Processes using kernel driver☆349Updated 2 years ago
- Kill AV/EDR leveraging BYOVD attack☆373Updated 2 years ago
- Shellcode launcher for AV bypass☆217Updated last year
- Attempt at Obfuscated version of SharpCollection☆221Updated this week
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆643Updated 3 weeks ago
- BOF for Kerberos abuse (an implementation of some important features of the Rubeus).☆492Updated 5 months ago
- Creating a repository with all public Beacon Object Files (BoFs)☆523Updated 2 years ago
- Amsi Bypass payload that works on Windwos 11☆377Updated 2 years ago
- A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk☆463Updated last year
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆483Updated 3 months ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆576Updated 8 months ago
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆308Updated last year
- Escalate Service Account To LocalSystem via Kerberos☆396Updated 2 years ago
- Awesome AV/EDR/XDR Bypass Tips☆280Updated 2 years ago
- Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8☆354Updated last year
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆506Updated 4 months ago
- Modules used by the Havoc Framework☆247Updated last year
- UAC Bypass By Abusing Kerberos Tickets☆499Updated 2 years ago
- COM Hijacking VOODOO☆316Updated 6 months ago
- XLL Phishing Tradecraft☆424Updated 3 years ago
- Materials for the workshop "Red Team Ops: Havoc 101"☆386Updated 11 months ago
- 🍊 Orange Tsai EventViewer RCE☆189Updated 3 years ago
- transform your payload into ipv4/ipv6/mac arrays☆192Updated 3 years ago
- Execute shellcode from a remote-hosted bin file using Winhttp.☆235Updated 2 years ago
- Leak of any user's NetNTLM hash. Fixed in KB5040434☆258Updated last year
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆307Updated last year
- Protected Process Dumper Tool☆564Updated 2 years ago
- Generate an obfuscated DLL that will disable AMSI & ETW☆328Updated last year
- micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.☆196Updated last year
- A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.☆324Updated 2 years ago