mertdas / RedPersistLinks
☆222Updated last year
Alternatives and similar repositories for RedPersist
Users that are interested in RedPersist are comparing it to the libraries listed below
Sorting:
- 🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.☆159Updated 2 years ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆249Updated last year
- A Tool that aims to evade av with binary padding☆160Updated last year
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆224Updated 2 years ago
- TeamServer and Client of Exploration Command and Control Framework☆176Updated last month
- Execute shellcode from a remote-hosted bin file using Winhttp.☆241Updated 2 years ago
- Leverage WindowsApp createdump tool to obtain an lsass dump☆153Updated last year
- ☆241Updated last year
- ☆168Updated 2 years ago
- ☆102Updated 2 years ago
- Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation☆331Updated 3 weeks ago
- Evasive Golang Loader☆137Updated last year
- Weaponized HellsGate/SigFlip☆204Updated 2 years ago
- Execute shellcode files with rundll32☆214Updated 2 years ago
- Chrome browser extension-based Command & Control☆230Updated 7 months ago
- An aggressor script that can help automate payload building in Cobalt Strike☆118Updated 2 years ago
- An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…☆139Updated 3 years ago
- Use ESC1 to perform a makeshift DCSync and dump hashes☆210Updated 2 years ago
- Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445☆53Updated last year
- Github as C2 Demonstration , free API = free C2 Infrastructure☆145Updated 2 years ago
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆205Updated 2 years ago
- Set of python scripts which perform different ways of command execution via WMI protocol.☆165Updated 2 years ago
- Terminate AV/EDR Processes using kernel driver☆352Updated 2 years ago
- PoC exploit for the vulnerable WatchDog Anti-Malware driver (amsdk.sys) – weaponized to kill protected EDR/AV processes via BYOVD.☆180Updated 4 months ago
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆285Updated 2 years ago
- Escalate Service Account To LocalSystem via Kerberos☆402Updated 2 years ago
- ☆341Updated 2 months ago
- AV bypass while you sip your Chai!☆226Updated last year
- Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles☆202Updated last year
- Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.☆312Updated 3 years ago