Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon.
☆154Apr 27, 2021Updated 5 years ago
Alternatives and similar repositories for aggrokatz
Users that are interested in aggrokatz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆246Jul 14, 2021Updated 5 years ago
- Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2☆186Jul 21, 2022Updated 4 years ago
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- ☆100Aug 23, 2021Updated 5 years ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆143Sep 29, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A beacon generator using Cobalt Strike and a variety of tools.☆447Aug 10, 2021Updated 5 years ago
- Section Mapping Process Injection (secinject): Cobalt Strike BOF☆106Jan 7, 2022Updated 4 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- DLL Hijack Search Order Enumeration BOF☆146Nov 3, 2021Updated 4 years ago
- Cobalt Strike BOF for quser.exe implementation using Windows API☆89Mar 22, 2023Updated 3 years ago
- Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type☆216Mar 18, 2024Updated 2 years ago
- Remove API hooks from a Beacon process.☆283Sep 18, 2021Updated 5 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆220Jul 14, 2021Updated 5 years ago
- Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…☆466Mar 8, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.☆290Jun 8, 2026Updated 4 months ago
- C++ WinRM API via Reflective DLL☆144Sep 11, 2021Updated 5 years ago
- An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Opt…☆227Aug 23, 2022Updated 4 years ago
- Cobalt Strike Beacon Object Files☆168May 2, 2022Updated 4 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆379Mar 8, 2023Updated 3 years ago
- Self-developed tools for Lateral Movement/Code Execution☆724Aug 17, 2021Updated 5 years ago
- ☆118Jun 17, 2022Updated 4 years ago
- Project to enumerate proxy configurations and generate shellcode from CobaltStrike☆137Nov 4, 2020Updated 5 years ago
- Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.☆78Apr 6, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆94May 14, 2022Updated 4 years ago
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆878Mar 20, 2023Updated 3 years ago
- (kinda) Malicious Outlook Reader☆137Mar 3, 2021Updated 5 years ago
- tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"☆180Nov 26, 2021Updated 4 years ago
- A .NET Runtime for Cobalt Strike's Beacon Object Files☆791Sep 4, 2024Updated 2 years ago
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆107Mar 8, 2023Updated 3 years ago
- New UAC bypass for Silent Cleanup for CobaltStrike☆188Jul 14, 2021Updated 5 years ago
- Cobalt Strike kit for Persistence☆490Jan 27, 2020Updated 6 years ago
- Cobalt Strike script for ScareCrow payloads intergration (EDR/AV evasion)☆462Jul 15, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Obtain and parse SSL certificates☆87Nov 19, 2021Updated 4 years ago
- A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.☆463Mar 25, 2024Updated 2 years ago
- A C port of b33f's UrbanBishop☆38Oct 1, 2020Updated 6 years ago
- AutoStart teamserver and listeners with services☆73Dec 23, 2021Updated 4 years ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆296Aug 18, 2023Updated 3 years ago
- A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.☆441Apr 1, 2022Updated 4 years ago
- Cobalt Strike kit for Lateral Movement☆676Feb 21, 2020Updated 6 years ago