nbaertsch / AutoAppDomainHijackLinks
Automated .NET AppDomain hijack payload generation
☆128Updated 9 months ago
Alternatives and similar repositories for AutoAppDomainHijack
Users that are interested in AutoAppDomainHijack are comparing it to the libraries listed below
Sorting:
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆76Updated last year
- Remotely Enumerate sessions using undocumented Windows Station APIs☆119Updated last year
- ☆109Updated 8 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆126Updated last year
- Abuse leaked token handles.☆133Updated last year
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆86Updated 8 months ago
- ☆92Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year
- A C# port from Invoke-GhostTask☆118Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆102Updated 7 months ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆156Updated 2 years ago
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated last year
- Example code samples from our ScriptBlock Smuggling Blog post☆91Updated last year
- .bin file to shellcode convertor☆38Updated last year
- ☆82Updated last year
- Lateral Movement☆124Updated 2 years ago
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆154Updated last year
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆101Updated 7 months ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆98Updated last year
- Basic interactive Windows kernel offensive toolkit written in C☆133Updated last month
- lsassdump via RtlCreateProcessReflection and NanoDump☆83Updated last year
- PoC for dumping and decrypting cookies in the latest version of Microsoft Teams☆131Updated 2 years ago
- Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…☆118Updated 4 months ago
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆144Updated 7 months ago
- a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab☆64Updated 10 months ago
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated last year
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Updated last year
- Create Anti-Copy DRM Malware☆68Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆61Updated 10 months ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆136Updated 2 weeks ago