rasta-mouse / SpawnWithLinks
☆110Updated 7 months ago
Alternatives and similar repositories for SpawnWith
Users that are interested in SpawnWith are comparing it to the libraries listed below
Sorting:
- Lateral Movement via the .NET Profiler☆83Updated 10 months ago
- ☆82Updated last year
- Run Cobalt Strike BOFs in Brute Ratel C4!☆71Updated 5 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆79Updated 7 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆74Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆58Updated 9 months ago
- Modified versions of the Cobalt Strike Process Injection Kit☆101Updated last year
- ☆91Updated last year
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆75Updated last year
- ☆57Updated 7 months ago
- TokenCert☆100Updated 10 months ago
- Dump processes over WMI with MSFT_MTProcess☆56Updated 2 weeks ago
- Lateral movement with DCOM DLL hijacking☆140Updated 2 months ago
- A BOF to enumerate system process, their protection levels, and more.☆120Updated 10 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆91Updated last year
- An impacket-lite cli tool that combines many useful impacket functions using a single session.☆53Updated this week
- ☆98Updated last year
- ☆123Updated last year
- ☆124Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆126Updated 11 months ago
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆119Updated last year
- Local SYSTEM auth trigger for relaying - X☆138Updated 2 months ago
- Click Once + App Domain☆63Updated last year
- Lateral Movement☆124Updated last year
- Modern PIC implant for Windows (64 & 32 bit)☆104Updated 2 months ago
- Sniffing files generator☆59Updated 7 months ago
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆102Updated 11 months ago
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆66Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year
- ☆53Updated last week