nbaertsch / AutoAppDomainHijackLinks
Automated .NET AppDomain hijack payload generation
☆130Updated 10 months ago
Alternatives and similar repositories for AutoAppDomainHijack
Users that are interested in AutoAppDomainHijack are comparing it to the libraries listed below
Sorting:
- Abuse leaked token handles.☆134Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆92Updated last year
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated 2 years ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆126Updated last year
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆76Updated last year
- ☆92Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆102Updated 9 months ago
- PoC for dumping and decrypting cookies in the latest version of Microsoft Teams☆132Updated 2 years ago
- Lateral Movement☆125Updated 2 years ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆149Updated last year
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆100Updated 2 years ago
- ☆109Updated 10 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆88Updated 9 months ago
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆155Updated last year
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆102Updated 9 months ago
- C# havoc implant☆101Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆156Updated 2 years ago
- Python tool to interact with WMI StdRegProv☆60Updated last year
- A C# port from Invoke-GhostTask☆119Updated last year
- C++ Staged Shellcode Loader with Evasion capabilities.☆99Updated last year
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆70Updated last year
- Reasonably undetected shellcode stager and executer.☆37Updated 7 months ago
- ☆163Updated 2 years ago
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆141Updated last month
- ☆79Updated 2 years ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆162Updated last month
- Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…☆120Updated 6 months ago
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆100Updated 5 months ago