rsmudge / ZeroLogon-BOF
☆154Updated 2 years ago
Related projects: ⓘ
- My CobaltStrike BOFS☆156Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL…☆160Updated last year
- Zipper, a CobaltStrike file and folder compression utility.☆187Updated 4 years ago
- Pass the Hash to a named pipe for token Impersonation☆140Updated 3 years ago
- Convert Cobalt Strike profiles to IIS web.config files☆109Updated 3 years ago
- C# version of Powermad☆152Updated 9 months ago
- Beacon Object File PoC implementation of KillDefender☆213Updated 2 years ago
- A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.☆145Updated 2 years ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆138Updated 2 years ago
- ☆167Updated 3 years ago
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆237Updated 3 years ago
- Perform DCSync operation without mimikatz☆136Updated 2 years ago
- Shellcode injection POC using syscalls.☆116Updated 4 years ago
- DLL Hijack Search Order Enumeration BOF☆140Updated 2 years ago
- Collection of tested Cobaltstrike aggressor scripts.☆108Updated 4 years ago
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆212Updated last year
- Impacket is a collection of Python classes for working with network protocols.☆39Updated 2 years ago
- Spray a hash via smb to check for local administrator access☆140Updated 3 years ago
- New UAC bypass for Silent Cleanup for CobaltStrike☆187Updated 3 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆184Updated 3 years ago
- A sort of simple shell which support multiple protocols.☆99Updated 5 years ago
- A Cobalt Strike Aggressor script to generate GadgetToJScript payloads☆98Updated 3 years ago
- Cobalt Strike Beacon Object Files☆158Updated 2 years ago
- DCSync Attack from Outside using Impacket☆109Updated 2 years ago
- AV/EDR evasion via direct system calls.☆98Updated 9 months ago
- A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…☆265Updated last year
- Example code for using named pipe output with beacon ReflectiveDLLs☆108Updated 4 years ago
- Pass the Hash to a named pipe for token Impersonation☆291Updated 9 months ago
- ☆111Updated 4 years ago
- Extendable payload obfuscation and delivery framework☆140Updated last year