Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll
☆54Jun 16, 2025Updated last year
Alternatives and similar repositories for LainAmsiOpenSession
Users that are interested in LainAmsiOpenSession are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Performs a global AMSI bypass by patching amsi.dll in memory.☆21Oct 14, 2025Updated last year
- ☆30Aug 11, 2025Updated last year
- SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspectin…☆87Aug 9, 2026Updated 2 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated 3 weeks ago
- SeTcbPrivilege Local Privilege Escalation Exploit☆18Oct 20, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Permanently disable EDRs as local admin☆131Dec 19, 2025Updated 9 months ago
- Bash and ZSH integration for Impacket☆71Sep 13, 2026Updated last month
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆12Oct 27, 2023Updated 2 years ago
- ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets …☆163Jul 8, 2026Updated 3 months ago
- ☆52Jun 12, 2026Updated 4 months ago
- Mythic C2 CheatSheet for OSEP☆79Jun 17, 2026Updated 4 months ago
- Token impersonation in PowerShell to execute under the context of another user.☆25Oct 14, 2025Updated last year
- Four-kit defense evasion suite for Sliver C2: Crystal Palace loader, sleep masking, in-memory PE execution, and remote process injection …☆102Jul 21, 2026Updated 2 months ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 2 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Living off the land searches for explorer and sharepoint☆104Jul 30, 2026Updated 2 months ago
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆59Jul 13, 2025Updated last year
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆279Jun 18, 2025Updated last year
- Dynamic shellcode loader with sophisticated evasion capabilities☆342Oct 1, 2025Updated last year
- Tool to obtain hash using MS-SNTP for user accounts☆31Jan 22, 2025Updated last year
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆218Feb 6, 2025Updated last year
- A python script that automates a C2 Profile build☆49Jul 21, 2026Updated 2 months ago
- Enumerate Domain Users Without Authentication☆312Apr 22, 2025Updated last year
- .bin file to shellcode convertor☆39Jul 5, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- Automation of Active Directory penetration testing tasks on top of BloodHound CE☆35Aug 21, 2023Updated 3 years ago
- In-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading…☆79Updated this week
- A collection of useful tools and scripts were developed and gathered throughout the Offensive Security's PEN-300 (OSEP) course.☆362Aug 9, 2025Updated last year
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆21Jan 20, 2025Updated last year
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆467Jun 27, 2025Updated last year
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆22Feb 20, 2025Updated last year
- Remote DLL Injection with Timer-based Shellcode Execution☆215Jul 18, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.☆749May 9, 2026Updated 5 months ago
- Convert your shellcode into an ASCII string☆129Jun 27, 2025Updated last year
- This is the tool to dump the LSASS process on modern Windows 11☆679May 23, 2026Updated 4 months ago
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year