ricardojoserf / NativeTokenImpersonate
Impersonate Tokens using only NTAPI functions
☆54Updated 2 weeks ago
Alternatives and similar repositories for NativeTokenImpersonate:
Users that are interested in NativeTokenImpersonate are comparing it to the libraries listed below
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆14Updated last week
- ☆97Updated 7 months ago
- ☆54Updated 5 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆70Updated 11 months ago
- A python script that automates a C2 Profile build☆35Updated 3 weeks ago
- TokenCert☆95Updated 5 months ago
- Construct the payload at runtime using an array of offsets☆63Updated 9 months ago
- ☆54Updated 2 months ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆27Updated 10 months ago
- Section-based payload obfuscation technique for x64☆59Updated 8 months ago
- Windows Thread Pool Injection Havoc Implementation☆28Updated last year
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆74Updated 8 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆73Updated last month
- Tool to bypass LSA Protection (aka Protected Process Light)☆49Updated 3 months ago
- BOF to decrypt Signal Desktop chat logs☆65Updated last month
- A simple C++ Windows tool to get information about processes exposing named pipes.☆37Updated last month
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 9 months ago
- A collection of position independent coding resources☆68Updated 2 months ago
- Rust template/library for implementing your own COFF loader☆49Updated 2 months ago
- ☆106Updated 2 months ago
- ☆52Updated 3 months ago
- Lateral Movement via the .NET Profiler☆80Updated 4 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆80Updated 6 months ago
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆60Updated last year
- Sniffing files generator☆54Updated last month
- BOF for C2 framework☆40Updated 5 months ago
- Proxy function calls through the thread pool with ease☆25Updated last month
- ☆110Updated 4 months ago
- Tool to aid in dumping LSASS process remotely☆38Updated 8 months ago
- Python3 rewrite of AsOutsider features of AADInternals☆43Updated 3 months ago