Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS
☆62Jul 22, 2026Updated 2 months ago
Alternatives and similar repositories for HiveOracle
Users that are interested in HiveOracle are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆79Aug 1, 2026Updated 2 months ago
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- ☆34Aug 6, 2026Updated 2 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- ☆30Jul 24, 2026Updated 2 months ago
- CVE-2026-50522 PoC☆43Aug 15, 2026Updated 2 months ago
- PIC shellcode agent based on Stardust framework and Crystal Palace☆92Oct 4, 2026Updated 2 weeks ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 2 months ago
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated 3 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated last month
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆152Aug 18, 2026Updated 2 months ago
- Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in…☆198Jun 25, 2026Updated 3 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆28Updated this week
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 2 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆109Sep 25, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- BOF for C2 framework☆45Nov 9, 2024Updated last year
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated last month
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- ☆72Jul 12, 2026Updated 3 months ago
- A listener profile for the Mythic C2 framework that utilizes AI vendors file API's☆30Oct 2, 2026Updated 2 weeks ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 3 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆255Sep 29, 2026Updated 2 weeks ago
- Debugger utilizing stealth hooks to hide from debugger detection☆25Aug 22, 2026Updated last month
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆35Jul 24, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆146Aug 20, 2026Updated last month
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆57Jul 8, 2026Updated 3 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- Repository for various Beacon Object Files (BOFs)☆122Updated this week
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated 3 weeks ago
- WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized securi…☆160Aug 1, 2026Updated 2 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago