nccgroup/Change-Lockscreen external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

nccgroup/Change-Lockscreen

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/nccgroup/Change-Lockscreen)

Close

nccgroup / Change-LockscreenView on GitHubMore

• External links
• Readme badge

Offensive tool to trigger network authentications as SYSTEM

☆144Dec 9, 2021Updated 4 years ago

Alternatives and similar repositories for Change-Lockscreen

Users that are interested in Change-Lockscreen are comparing it to the libraries listed below

• EspressoCake / BeaconDownloadSync

  View on GitHub
  ☆94May 14, 2022Updated 3 years ago
• CCob / lsarelayx

  View on GitHub
  NTLM relaying for Windows made easy
  ☆581Apr 25, 2023Updated 2 years ago
• EspressoCake / PPLDump_BOF

  View on GitHub
  A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.
  ☆143Sep 24, 2021Updated 4 years ago
• jsecu / CredManBOF

  View on GitHub
  ☆99Sep 20, 2021Updated 4 years ago
• alfarom256 / BOF-ForeignLsass

  View on GitHub
  ☆101Aug 23, 2021Updated 4 years ago
• cube0x0 / SharpSystemTriggers

  View on GitHub
  Collection of remote authentication triggers in C#
  ☆524May 15, 2024Updated last year
• med0x2e / NTLMRelay2Self

  View on GitHub
  An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav).
  ☆418Jan 27, 2024Updated 2 years ago
• CCob / Volumiser

  View on GitHub
  ☆429Apr 22, 2025Updated 11 months ago
• ShutdownRepo / ShadowCoerce

  View on GitHub
  MS-FSRVP coercion abuse PoC
  ☆302Dec 30, 2021Updated 4 years ago
• mdsecactivebreach / SharpAltiris

  View on GitHub
  ☆25Jul 7, 2022Updated 3 years ago
• mez-0 / CSharpWinRM

  View on GitHub
  .NET 4.0 WinRM API Command Execution
  ☆166Sep 11, 2020Updated 5 years ago
• Kevin-Robertson / Sharpmad

  View on GitHub
  C# version of Powermad
  ☆169Dec 5, 2023Updated 2 years ago
• m57 / cobaltstrike_bofs

  View on GitHub
  My CobaltStrike BOFS
  ☆167Jul 23, 2022Updated 3 years ago
• djhohnstein / CSharpCreateThreadExample

  View on GitHub
  C# code to run PIC using CreateThread
  ☆17Apr 19, 2019Updated 6 years ago
• Aetsu / OffensivePipeline

  View on GitHub
  OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team…
  ☆819Oct 27, 2023Updated 2 years ago
• kyleavery / inject-assembly

  View on GitHub
  Inject .NET assemblies into an existing process
  ☆507Jan 19, 2022Updated 4 years ago
• boku7 / xPipe

  View on GitHub
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆95Mar 8, 2023Updated 3 years ago
• Semperis / GoldenGMSA

  View on GitHub
  GolenGMSA tool for working with GMSA passwords
  ☆172Aug 21, 2025Updated 7 months ago
• eladshamir / Whisker

  View on GitHub
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆935Nov 11, 2024Updated last year
• Allevon412 / TeamsImplant

  View on GitHub
  ☆207Feb 24, 2022Updated 4 years ago
• w1u0u1 / minidump

  View on GitHub
  Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemo…
  ☆127Jan 18, 2022Updated 4 years ago
• Dec0ne / ShadowSpray

  View on GitHub
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆483Oct 14, 2022Updated 3 years ago
• decoder-it / KrbRelay-SMBServer

  View on GitHub
  ☆234Oct 8, 2024Updated last year
• Luct0r / KerberOPSEC

  View on GitHub
  OPSEC safe Kerberoasting in C#
  ☆198Jun 14, 2022Updated 3 years ago
• nettitude / MalSCCM

  View on GitHub
  ☆254Sep 28, 2023Updated 2 years ago
• zimnyaa / inmembof.py

  View on GitHub
  A small example of loading BOFs in Python with pure reflection
  ☆19Jan 26, 2023Updated 3 years ago
• klezVirus / SharpLdapRelayScan

  View on GitHub
  C# Port of LdapRelayScan
  ☆91Nov 26, 2025Updated 3 months ago
• netwrix / server-untrust-account

  View on GitHub
  A technique for Active Directory domain persistence
  ☆39May 31, 2023Updated 2 years ago
• deepinstinct / LsassSilentProcessExit

  View on GitHub
  Command line interface to dump LSASS memory to disk via SilentProcessExit
  ☆454Dec 23, 2020Updated 5 years ago
• mez-0 / winrmdll

  View on GitHub
  C++ WinRM API via Reflective DLL
  ☆145Sep 11, 2021Updated 4 years ago
• zimnyaa / noWatch

  View on GitHub
  Implant drop-in for EDR testing
  ☆147Nov 15, 2023Updated 2 years ago
• xforcered / InvisibilityCloak

  View on GitHub
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆430Jul 22, 2022Updated 3 years ago
• zblurx / certsync

  View on GitHub
  Dump NTDS with golden certificates and UnPAC the hash
  ☆647Mar 20, 2024Updated 2 years ago
• two06 / SharpShot

  View on GitHub
  Capture screenshots from .NET using .NET methods or Windows API calls
  ☆66Mar 9, 2020Updated 6 years ago
• Octoberfest7 / EventViewerUAC_BOF

  View on GitHub
  Beacon Object File implementation of Event Viewer deserialization UAC bypass
  ☆133May 6, 2022Updated 3 years ago
• trainr3kt / Readfile_BoF

  View on GitHub
  ☆22Jun 21, 2022Updated 3 years ago
• jfmaes / SharpHandler

  View on GitHub
  ☆185Jan 5, 2021Updated 5 years ago
• EspressoCake / Firewall_Walker_BOF

  View on GitHub
  A BOF to interact with COM objects associated with the Windows software firewall.
  ☆109Oct 10, 2021Updated 4 years ago
• airbus-cert / Invoke-Bof

  View on GitHub
  Load any Beacon Object File using Powershell!
  ☆261Dec 9, 2021Updated 4 years ago