mmnoureldin / UnmanagedPowerShellLinks
☆31Updated 2 years ago
Alternatives and similar repositories for UnmanagedPowerShell
Users that are interested in UnmanagedPowerShell are comparing it to the libraries listed below
Sorting:
- ☆70Updated 3 years ago
- Simple BOF to read the protection level of a process☆118Updated 2 years ago
- ☆141Updated 3 years ago
- ☆52Updated 2 years ago
- ☆88Updated 3 years ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆101Updated 2 years ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆56Updated 3 years ago
- A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …☆88Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆116Updated last year
- Run Cobalt Strike BOFs in Brute Ratel C4!☆71Updated 4 months ago
- A C# tool to output crackable DPAPI hashes from user MasterKeys☆135Updated 11 months ago
- ☆127Updated 2 years ago
- ☆88Updated 2 years ago
- Lateral Movement via the .NET Profiler☆82Updated 9 months ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆86Updated 3 years ago
- POC tools for exploring SMB over QUIC protocol☆128Updated 3 years ago
- A simple BOF that frees UDRLs☆120Updated 3 years ago
- Rewrote HellsGate in C# for fun and learning☆86Updated 3 years ago
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆106Updated 2 years ago
- .NET project for installing Persistence☆63Updated 3 years ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆139Updated last year
- Unchain AMSI by patching the provider’s unmonitored memory space☆91Updated 2 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆75Updated 2 years ago
- ☆110Updated 6 months ago
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆108Updated 2 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆85Updated 2 years ago
- Coerce Windows machines auth via MS-EVEN☆166Updated last year
- C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD…☆42Updated 2 years ago
- ☆124Updated last year
- Automating payload generation for OSEP labs and exam.☆34Updated 3 years ago