mmnoureldin / UnmanagedPowerShell
☆29Updated 2 years ago
Alternatives and similar repositories for UnmanagedPowerShell
Users that are interested in UnmanagedPowerShell are comparing it to the libraries listed below
Sorting:
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆55Updated 3 years ago
- ☆88Updated 2 years ago
- ☆62Updated 2 years ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆94Updated 2 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆86Updated 2 years ago
- Automating payload generation for OSEP labs and exam.☆34Updated 2 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆86Updated 2 years ago
- A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket☆55Updated 4 years ago
- ☆141Updated 3 years ago
- .NET project for installing Persistence☆64Updated 3 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆66Updated last month
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆74Updated 2 years ago
- POC tools for exploring SMB over QUIC protocol☆123Updated 3 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆90Updated 2 years ago
- Collection of Beacon Object Files (BOFs) for shells and lols☆118Updated 3 years ago
- Secretsdump C# version only supporting local (live) operation☆49Updated 3 weeks ago
- ☆94Updated 3 years ago
- I have documented all of the AMSI patches that I learned till now☆72Updated last month
- A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …☆86Updated 2 years ago
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆58Updated 2 years ago
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆106Updated 2 years ago
- Beacon Object File allowing creation of Beacons in different sessions.☆80Updated 2 years ago
- A simple BOF that frees UDRLs☆119Updated 2 years ago
- Active Directory certificate abuse.☆38Updated 3 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆117Updated 7 months ago
- A LAPS dumper written using the impacket library.☆31Updated last year
- C# havoc implant☆99Updated 2 years ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆87Updated 4 months ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆137Updated last year
- Golng version of SharpDump that can be used to extract LSASS or any other proces. Provides token elevation prior to creating dump of high…☆21Updated 4 years ago