rvrsh3ll / UACSilentCleanup
☆14Updated 4 years ago
Related projects: ⓘ
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 4 years ago
- Execute Shellcode And Other Goodies From MMC☆12Updated 9 years ago
- C# code to run PIC using CreateThread☆16Updated 5 years ago
- ☆16Updated 6 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 4 years ago
- Quick Proof of Concept for reading a processes memory and searching for a specific string.☆10Updated 5 years ago
- ☆11Updated 4 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 5 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆14Updated 5 years ago
- Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog☆13Updated 4 years ago
- Techniques that i have used to evade anti-virus during pen tests.☆13Updated 6 years ago
- A custom run space to bypass AMSI and Constrained Language mode in PowerShell.☆19Updated last year
- Create COM Objects backed by Scripts, not DLLs☆9Updated 7 years ago
- Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical she…☆19Updated 4 years ago
- Spoof parent process ID☆13Updated 5 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆13Updated 6 years ago
- ☆10Updated this week
- Modifies machine.config for persistence after installing signed .net assembly onto GAC☆11Updated 2 years ago
- Miscellaneous PowerShell scripts for red team activities☆16Updated 3 weeks ago
- Spin up a reverse proxy quickly on Heroku☆13Updated 3 years ago
- Windows privilege escalation Mafia is a framework provides all resources needed for privilege escalation beginners☆12Updated 2 years ago
- ☆12Updated this week
- PoC code from blog☆16Updated 4 years ago
- module for certexfil☆15Updated 2 years ago
- Ransoblin (Ransomware Bokoblin)☆17Updated 3 years ago
- ☆17Updated this week
- C# DCOM Execution☆17Updated 5 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆20Updated 3 years ago
- Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2☆17Updated 3 years ago
- CreateProcessAsUser experiments☆6Updated 8 years ago