sailay1996 / FileWrite2systemLinks
File Write Weapon for Privilege Escalation To get SYSTEM
☆18Updated 5 years ago
Alternatives and similar repositories for FileWrite2system
Users that are interested in FileWrite2system are comparing it to the libraries listed below
Sorting:
- Penetration Test / Read Team - C# tools repository☆55Updated 4 years ago
- adding a backdooruser using win32api☆80Updated 5 years ago
- A simple injector that uses LoadLibraryA☆18Updated 5 years ago
- Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)☆26Updated 5 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆79Updated 5 years ago
- C++ implant that interfaces with a SK8PARK server☆49Updated 4 years ago
- AppXSVC Service race condition - privilege escalation☆29Updated 6 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆40Updated 4 years ago
- Recreating and reviewing the Windows persistence methods☆39Updated 4 years ago
- Automate AV evasion by calling AMSI☆87Updated 2 years ago
- Execute Mimikatz with different technique☆51Updated 4 years ago
- Suite of Shellcode Running Utilities☆114Updated 5 years ago
- Python 3 server used to control SK8RAT implant☆36Updated 4 years ago
- Video files for eBook: "Bypassing AVs by C#.NET Programming"☆41Updated 2 years ago
- AMSI Bypass Via the Heap☆107Updated 5 years ago
- The Hunt for Malicious Strings☆13Updated 5 years ago
- Credential Dumper☆79Updated 5 years ago
- AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.☆66Updated 5 years ago
- Applying some AV evasion techniques on a metasploit reverse shell☆18Updated 5 years ago
- Initial Commit of Coresploit☆57Updated 4 years ago
- ☆48Updated 5 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆106Updated 2 years ago
- ☆55Updated 4 years ago
- I used this to see if an EDR is running in Safe Mode☆36Updated 4 years ago
- Simple Process Hollowing in C#☆68Updated 8 years ago
- Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069☆37Updated 6 years ago
- Send message on Telegram when you get a new Cobalt Strike beacon☆21Updated 6 years ago
- (Sim)ulate (Ba)zar Loader☆29Updated 5 years ago
- Run PowerShell command without invoking powershell.exe☆35Updated 4 years ago
- Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.☆37Updated 5 years ago