nettitude / MalSCCMLinks
☆250Updated 2 years ago
Alternatives and similar repositories for MalSCCM
Users that are interested in MalSCCM are comparing it to the libraries listed below
Sorting:
- OPSEC safe Kerberoasting in C#☆193Updated 3 years ago
- GolenGMSA tool for working with GMSA passwords☆163Updated 2 months ago
- Investigation about ACL abusing for Active Directory Certificate Services (AD CS)☆130Updated 4 years ago
- ☆156Updated 9 months ago
- Modular C# framework to exfiltrate loot over secure and trusted channels.☆131Updated 4 years ago
- Beacon Object File & C# project to check LDAP signing☆195Updated last year
- Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus☆244Updated 3 years ago
- Start new PowerShell without etw and amsi in pure nim☆156Updated 3 years ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆259Updated 2 years ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆140Updated last year
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆176Updated 2 years ago
- ADCS cert template modification and ACL enumeration☆143Updated 2 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆186Updated 3 years ago
- Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares☆188Updated 2 years ago
- Koppeling x Metatwin x LazySign☆215Updated 4 years ago
- Password attacks and MFA validation against various endpoints in Azure and Office 365☆153Updated 2 years ago
- ☆195Updated 2 months ago
- Run Powershell without software restrictions.☆283Updated 4 years ago
- Remotely enables Restricted Admin Mode☆215Updated 4 years ago
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆300Updated 3 years ago
- pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Blood…☆137Updated 2 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆86Updated 3 years ago
- AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…☆231Updated 4 years ago
- Simple C# implementation of PowerUpSQL☆94Updated last year
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆255Updated 3 years ago
- A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.☆132Updated 2 years ago
- Fully modular persistence framework☆256Updated 2 years ago
- ACL abuse swiss-knife☆125Updated 2 years ago
- Buggy script to play with GPOs☆118Updated 10 months ago
- ☆122Updated 2 years ago