Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll
☆53Jun 16, 2025Updated last year
Alternatives and similar repositories for LainAmsiOpenSession
Users that are interested in LainAmsiOpenSession are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Performs a global AMSI bypass by patching amsi.dll in memory.☆20Oct 14, 2025Updated 11 months ago
- ☆29Aug 11, 2025Updated last year
- Permanently disable EDRs as local admin☆131Dec 19, 2025Updated 9 months ago
- SeTcbPrivilege Local Privilege Escalation Exploit☆18Oct 20, 2025Updated 11 months ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets …☆164Jul 8, 2026Updated 2 months ago
- ☆51Jun 12, 2026Updated 3 months ago
- Living off the land searches for explorer and sharepoint☆103Jul 30, 2026Updated last month
- Token impersonation in PowerShell to execute under the context of another user.☆25Oct 14, 2025Updated 11 months ago
- Bash and ZSH integration for Impacket☆74Sep 13, 2026Updated 2 weeks ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆139Jul 30, 2026Updated last month
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆58Jul 13, 2025Updated last year
- Slides and videos from talks given at cons☆28Jun 22, 2026Updated 3 months ago
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆277Jun 18, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Enumerate Domain Users Without Authentication☆312Apr 22, 2025Updated last year
- .bin file to shellcode convertor☆38Jul 5, 2024Updated 2 years ago
- Dynamic shellcode loader with sophisticated evasion capabilities☆344Oct 1, 2025Updated 11 months ago
- A python script that automates a C2 Profile build☆49Jul 21, 2026Updated 2 months ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year
- Tool to obtain hash using MS-SNTP for user accounts☆31Jan 22, 2025Updated last year
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆92Jul 29, 2025Updated last year
- A collection of useful tools and scripts were developed and gathered throughout the Offensive Security's PEN-300 (OSEP) course.☆359Aug 9, 2025Updated last year
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆464Jun 27, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆21Jan 20, 2025Updated last year
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated last year
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆22Feb 20, 2025Updated last year
- An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface. Implementation of ligolo-ng into sliver☆31Feb 27, 2025Updated last year
- Automation of Active Directory penetration testing tasks on top of BloodHound CE☆35Aug 21, 2023Updated 3 years ago
- Remote DLL Injection with Timer-based Shellcode Execution☆215Jul 18, 2025Updated last year
- This is the tool to dump the LSASS process on modern Windows 11☆673May 23, 2026Updated 4 months ago
- Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.☆748May 9, 2026Updated 4 months ago
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of presentations and other contributions I have made to conferences.☆37Aug 18, 2026Updated last month
- Mythic C2 CheatSheet for OSEP☆77Jun 17, 2026Updated 3 months ago
- BlackHat Asia 2025 code and presentations☆17Apr 13, 2025Updated last year
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- Convert your shellcode into an ASCII string☆127Jun 27, 2025Updated last year
- A POC for developing BOFs for Sliver, Havoc, Cobalt Strike or most COFFLoaders in Rust.☆75Aug 24, 2025Updated last year
- PEN-300 collection to help you on your exam.☆14Apr 19, 2022Updated 4 years ago