nickvangilder / To-Safe-Mode-And-Beyond

Related projects ⓘ

Alternatives and complementary repositories for To-Safe-Mode-And-Beyond

• EvanMcBroom / sleepy
  A lexer and parser for Sleep
  ☆11Updated 3 weeks ago
• sk3w / beacon-object-files
  Miscellaneous examples for use with Cobalt Strike Beacon
  ☆10Updated 3 years ago
• D4rthMaulCop / DarthNetLoader
  ☆14Updated last year
• waleedassar / SyscallNumberExtractor
  ☆24Updated 3 years ago
• xforcered / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆26Updated last year
• ChaitanyaHaritash / NIM-Scripts
  ☆18Updated 3 years ago
• X-C3LL / wfp-reader
  Proof of concept - Covert Channel using Windows Filtering Platform (C#)
  ☆21Updated 3 years ago
• SolomonSklash / SeasideBishop
  A C port of b33f's UrbanBishop
  ☆37Updated 4 years ago
• thesnoom / extps-cobalt-strike-bof
  Extended Process List (Search functionality)
  ☆27Updated 3 years ago
• Adepts-Of-0xCC / SnoopyOwl
  ☆45Updated 3 years ago
• xenoscr / compressedCredBandit
  A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.
  ☆18Updated 3 years ago
• williamknows / CodeCoverageModuleStomping
  ☆10Updated 4 years ago
• zimnyaa / inmembof.py
  A small example of loading BOFs in Python with pure reflection
  ☆17Updated last year
• HackingThings / SuperSneakyExec
  Loading and executing shellcode in C# without PInvoke.
  ☆21Updated 2 years ago
• paranoidninja / DotNetTracer
  C code to enable ETW tracing for Dotnet Assemblies
  ☆28Updated 2 years ago
• N4kedTurtle / SharpTeamsDump
  Dump Teams conversations
  ☆17Updated 3 years ago
• EspressoCake / DLL_Version_Enumeration_BOF
  A BOF for enumerating version information for DLLs associated for a Beacon process.
  ☆12Updated 2 years ago
• m8sec / EAPrimer
  C# project to Reflectively load .Net assemblies in memory
  ☆17Updated 4 months ago
• passthehashbrowns / DInvokeProcessHollowing
  ☆26Updated 4 years ago
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆32Updated 2 years ago
• thefLink / Hunt-Weird-ImageLoads
  Small tool to play with IOCs caused by Imageload events
  ☆37Updated last year
• FuzzySecurity / SAFACon-Vienna
  ☆21Updated 6 months ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆23Updated 3 years ago
• klezVirus / DCKFinder
  Dangling COM Keys Finder
  ☆14Updated 2 years ago
• thiagomayllart / DarkMelkor
  Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.
  ☆27Updated 3 years ago
• latortuga71 / DisablePPLDriverPoc
  Disable PPL via custom driver and dump lsass
  ☆13Updated 3 years ago
• passthehashbrowns / hook-integrity-checks
  ☆20Updated 3 years ago
• mdsecactivebreach / SharpAltiris
  ☆24Updated 2 years ago