This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.
☆106Feb 14, 2023Updated 3 years ago
Alternatives and similar repositories for GetSystem
Users that are interested in GetSystem are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.☆17Jan 21, 2022Updated 4 years ago
- Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.☆115Jun 7, 2021Updated 5 years ago
- .NET project for installing Persistence☆63Feb 14, 2022Updated 4 years ago
- C# code to Sandbox Defender (and most probably other AV/EDRs).☆164Apr 22, 2022Updated 4 years ago
- SharpAddDomainMachine☆69Oct 12, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- .NET project for installing Persistence☆500Jun 26, 2024Updated 2 years ago
- A User Impersonation tool - via Token or Shellcode injection☆419May 21, 2022Updated 4 years ago
- One gate to all syscalls!☆23Mar 12, 2022Updated 4 years ago
- C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic☆144Feb 23, 2022Updated 4 years ago
- Inject .NET assemblies into an existing process☆509Jan 19, 2022Updated 4 years ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆97Apr 4, 2026Updated 6 months ago
- A small POC to make defender useless by removing its token privileges and lowering the token integrity☆690Jun 28, 2022Updated 4 years ago
- Patch AMSI and ETW☆251May 8, 2024Updated 2 years ago
- Misc TaskScheduler Plays☆237Sep 27, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PoC for UUID shellcode execution using DInvoke☆156Mar 8, 2021Updated 5 years ago
- cmd2shellcode☆78May 6, 2021Updated 5 years ago
- A simple hidden vnc.☆32Feb 19, 2021Updated 5 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 4 years ago
- Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR☆161Jul 22, 2021Updated 5 years ago
- Killing your preferred antimalware by abusing native symbolic links and NT paths.☆363Jan 29, 2022Updated 4 years ago
- An easy way to getsystem by golang.☆55Aug 30, 2021Updated 5 years ago
- Beacon Object File PoC implementation of KillDefender☆235Apr 12, 2022Updated 4 years ago
- Small tool to get a SYSTEM shell☆128Feb 7, 2016Updated 10 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Beacon Object File (BOF) Creation Helper☆238May 3, 2022Updated 4 years ago
- ☆155Jan 6, 2023Updated 3 years ago
- Playing with PE's and Building Structures by Hand☆22Apr 21, 2022Updated 4 years ago
- .NET, PE, & Raw Shellcode Packer/Loader Written in Nim☆826Jan 20, 2023Updated 3 years ago
- It's a go variant of Hells gate! (directly calling windows kernel functions, but from Go!)☆532Oct 12, 2022Updated 4 years ago
- Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…☆143Aug 16, 2021Updated 5 years ago
- C# Reflective loader for unmanaged binaries.☆446Jan 25, 2023Updated 3 years ago
- This is learning to write windows 32 api instance code in the golang language☆42Jan 14, 2022Updated 4 years ago
- Small POC for process ghosting☆39Feb 1, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Cobalt Strike kit for Persistence☆490Jan 27, 2020Updated 6 years ago
- Read Memory without ReadProcessMemory for Current Process☆88Feb 13, 2022Updated 4 years ago
- C# remote process injection utility for Cobalt Strike☆88Mar 9, 2020Updated 6 years ago
- Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.☆289Jun 8, 2026Updated 4 months ago
- .NET Project for Attacking vCenter☆558Nov 11, 2021Updated 4 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆141Feb 2, 2026Updated 9 months ago
- In-memory token vault BOF for Cobalt Strike☆152Aug 18, 2022Updated 4 years ago