safedv / RustSoliloquy
A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.
☆101Updated this week
Alternatives and similar repositories for RustSoliloquy:
Users that are interested in RustSoliloquy are comparing it to the libraries listed below
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆105Updated 7 months ago
- ☆59Updated this week
- Two in one, patch lifetime powershell console, no more etw and amsi!☆80Updated 5 months ago
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆127Updated 4 months ago
- Construct the payload at runtime using an array of offsets☆59Updated 5 months ago
- Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.☆81Updated this week
- Lifetime AMSI bypass.☆36Updated 5 months ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆79Updated 8 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆44Updated 9 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆112Updated 2 months ago
- Evade EDR's the simple way, by not touching any of the API's they hook.☆56Updated 4 months ago
- ☆128Updated 4 months ago
- ☆105Updated 3 weeks ago
- Windows Thread Pool Injection Havoc Implementation☆28Updated 8 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Updated 5 months ago
- A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.☆73Updated 6 months ago
- ☆83Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆85Updated 6 months ago
- ☆193Updated 2 months ago
- C2 Infrastructure Automation☆88Updated last month
- A Mythic Agent written in PIC C.☆141Updated 2 weeks ago
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆117Updated 5 months ago
- a port of privkit bof for havoc☆23Updated last year
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆121Updated last week
- Utilities for obfuscating shellcode☆48Updated 5 months ago
- Source code and examples for PassiveAggression☆54Updated 6 months ago
- Just another C2 Redirector using CloudFlare.☆79Updated 7 months ago
- ☆70Updated 4 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆56Updated 4 months ago
- Tool for Active Directory Certificate Services enumeration and abuse☆89Updated 2 weeks ago