olafhartong / BamboozlEDRLinks
A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
☆256Updated 3 months ago
Alternatives and similar repositories for BamboozlEDR
Users that are interested in BamboozlEDR are comparing it to the libraries listed below
Sorting:
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆92Updated last year
- ☆160Updated 11 months ago
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆207Updated last year
- Detect WFP filters blocking EDR communications☆96Updated 2 years ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆211Updated last year
- PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads☆237Updated 2 months ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆101Updated 8 months ago
- Find potential DLL Sideloads on your windows computer☆217Updated last year
- Persist like a Dodder☆67Updated 8 months ago
- ☆119Updated last year
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆164Updated 5 months ago
- Evade EDR's the simple way, by not touching any of the API's they hook.☆169Updated 11 months ago
- ☆229Updated 7 months ago
- C2 Infrastructure Automation☆116Updated 7 months ago
- An interactive shell to spoof some LOLBins command line☆187Updated last year
- BloodHound PowerShell client☆75Updated last month
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆139Updated last year
- A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …☆187Updated 8 months ago
- ☆159Updated last year
- Weaponizing DCOM for NTLM Authentication Coercions☆275Updated 6 months ago
- Easy to use, open-source infrastructure management platform, crafted specifically for red team engagements.☆107Updated last week
- Group Policy Objects manipulation and exploitation framework☆284Updated last month
- A Mythic Agent written in PIC C.☆205Updated 11 months ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆213Updated last year
- ☆189Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆156Updated last week
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆180Updated 8 months ago
- Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall☆109Updated last month
- Adversary Emulation Framework☆129Updated 6 months ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆194Updated last year