proxytype / RDP-THIEFLinks
RDP THIEF - inject dll to remote desktop process (mstsc.exe) and steal user credentials.
☆13Updated 4 years ago
Alternatives and similar repositories for RDP-THIEF
Users that are interested in RDP-THIEF are comparing it to the libraries listed below
Sorting:
- Windows File Enumeration Intel Gathering Tool.☆17Updated last year
- A more advanced free and open .NET obfuscator using dnlib.☆10Updated 2 years ago
- ☆15Updated last year
- ☆14Updated 3 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 5 years ago
- Run PowerShell command without invoking powershell.exe☆35Updated 3 years ago
- A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.☆19Updated 3 years ago
- ☆15Updated 5 years ago
- Core bypass Windows Defender and execute any binary converted to shellcode☆43Updated 3 years ago
- ☆18Updated 3 years ago
- golang String Obfuscate☆9Updated 3 years ago
- I used this to see if an EDR is running in Safe Mode☆37Updated 4 years ago
- Miscellaneous examples for use with Cobalt Strike Beacon☆10Updated 4 years ago
- leaking net-ntlm with webdav☆25Updated 4 years ago
- Ransoblin (Ransomware Bokoblin)☆18Updated 4 years ago
- ollvm, based on llvm-clang 5.0.2, 6.0.1, 7.0.1, 8.0, 9.0, 9.0.1☆19Updated 3 years ago
- JALSI - Just Another Lame Shellcode Injector☆30Updated 3 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Updated 2 years ago
- One gate to all syscalls!☆23Updated 3 years ago
- A console obfuscator for .NET assemblies.☆10Updated 2 years ago
- Repository for dirty scripts and PoCs☆17Updated 3 months ago
- C# .Net 5.0 project to build BOF (Beacon Object Files) in mass☆28Updated last year
- Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)☆23Updated 3 years ago
- ☆12Updated 2 years ago
- Red Team C2 and Post Exploitation Code☆36Updated 2 months ago
- ☆18Updated 4 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Updated last year
- Send message on Telegram when you get a new Cobalt Strike beacon☆21Updated 5 years ago
- ☆10Updated 3 years ago
- DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)☆27Updated 5 years ago