momo1239 / buffshark-shellcode-runner
Shellcode runner to execute malicious payload and bypass AV
☆14Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for buffshark-shellcode-runner
- A .NET implementation to dump SAM / SECURITY / SYSTEM registry hives☆49Updated 4 years ago
- .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac☆60Updated last year
- Kudzu is a Go C2 platform with an emphasis on extensibility.☆11Updated 3 years ago
- Secretsdump C# version only supporting local (live) operation☆47Updated last year
- Golng version of SharpDump that can be used to extract LSASS or any other proces. Provides token elevation prior to creating dump of high…☆21Updated 4 years ago
- Active Directory certificate abuse.☆36Updated 2 years ago
- Using syscall to load shellcode, Evasion techniques☆26Updated 3 years ago
- Execute Mimikatz with different technique☆50Updated 3 years ago
- AutoStart teamserver and listeners with services☆69Updated 2 years ago
- A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…☆31Updated 2 years ago
- Automating payload generation for OSEP labs and exam.☆34Updated 2 years ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆53Updated 2 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆48Updated 2 years ago
- A spin-off research project. Cobalt Strike x Notion collab 2022☆52Updated 2 years ago
- ☆42Updated 2 years ago
- Bypass AMSI via PowerShell by splitting a file into multiple chunks☆49Updated 3 years ago
- C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)☆46Updated last year
- Convert Cobalt Strike profiles to IIS web.config files☆110Updated 3 years ago
- A collection of Cobalt Strike aggressor scripts☆18Updated 4 years ago
- CallBack-Techniques for Shellcode execution ported to Nim☆56Updated 3 years ago
- Impacket is a collection of Python classes for working with network protocols.☆39Updated 3 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆117Updated last month
- CNA that interacts with a JAR file to dynamically rename GUI tabs within Cobalt Strike from a JSON file.☆23Updated 2 years ago
- A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket☆52Updated 4 years ago
- ☆54Updated 8 months ago
- Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…☆49Updated 2 years ago
- ☆58Updated 2 years ago
- load dumped csharp binaries as assemblies and launch them in memory☆26Updated 9 months ago
- A BOF port of the research of @thefLinkk and @codewhitesec☆94Updated 3 years ago