michaelbadichi / RunAsSystem

Related projects ⓘ

Alternatives and complementary repositories for RunAsSystem

• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 6 years ago
• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 4 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆85Updated last year
• Iamgublin / CVE-2019-0803
  Win32k Elevation of Privilege Poc
  ☆0Updated 5 years ago
• ThunderGunExpress / Reflective_Schtasks
  ☆54Updated 6 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆53Updated 5 years ago
• maaaaz / mimicertz
  A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates
  ☆24Updated 6 years ago
• cobbr / InsecurePowerShellHost
  InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…
  ☆30Updated 6 years ago
• kafkaesqu3 / subtee-gist-mirror
  few months old but better than nothing
  ☆58Updated 2 years ago
• tophertimzen / shellcodeTester
  GUI Application in C# to run and disassemble shellcode
  ☆35Updated 7 years ago
• jthuraisamy / CVE-2019-9730
  Synaptics Audio Driver LPE
  ☆35Updated 5 years ago
• irsl / CVE-2020-0728
  Proof of Concept code for CVE-2020-0728
  ☆46Updated 4 years ago
• rastating / slae
  The source code of the SLAE assignments documented at https://rastating.github.io/
  ☆23Updated 6 years ago
• umarfarook882 / Windows-InstallerBypass
  Windows Installer Bypass using Rollback Script .rbs and .rbf - Race Condition
  ☆21Updated 5 years ago
• 0xeb-bp / cve-2020-1015
  PoC for CVE-2020-1015
  ☆40Updated 4 years ago
• guardicore / vmware_guest_auth_bypass
  Proof of concept of VMSA-2017-0012
  ☆41Updated 7 years ago
• cybercitizen7 / Ps1jacker
  Ps1jacker is a tool for generating COM Hijacking payload.
  ☆61Updated 6 years ago
• vysecurity / Invoke-ProcessScan
  Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.
  ☆42Updated 7 years ago
• decoder-it / diaghub_exploit
  Simplified version of Forshaw's Diaghub Collector Exploit
  ☆31Updated 5 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆73Updated 4 years ago
• OsandaMalith / WindowsInternals
  Experiments on the Windows Internals
  ☆30Updated 5 years ago
• panagioto / Mimir
  A C++ POC for process injection using NtCreateSectrion, NtMapViewOfSection and RtlCreateUserThread. Credit to @spotheplanet for his notes…
  ☆42Updated 3 years ago
• vletoux / DetectPasswordViaNTLMInFlow
  Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …
  ☆57Updated 5 years ago
• jackson5sec / ShimDB
  Shim database persistence (Fin7 TTP)
  ☆35Updated 4 years ago