sec-consult / msiscan
Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers
☆112Updated 5 months ago
Alternatives and similar repositories for msiscan:
Users that are interested in msiscan are comparing it to the libraries listed below
- ☆85Updated 2 years ago
- ☆108Updated 3 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆89Updated 8 months ago
- A Python POC for CRED1 over SOCKS5☆140Updated 4 months ago
- Find DLLs with RWX section☆76Updated last year
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆116Updated 9 months ago
- A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.☆76Updated 8 months ago
- Lateral Movement via the .NET Profiler☆80Updated 3 months ago
- Local & remote Windows DLL Proxying☆161Updated 8 months ago
- Find .net assemblies locally☆105Updated 2 years ago
- Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io☆81Updated last year
- Just another ntdll unhooking using Parun's Fart technique☆73Updated 2 years ago
- Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post☆122Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆135Updated 6 months ago
- ☆48Updated 4 months ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆81Updated 4 months ago
- a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab☆62Updated 2 months ago
- Living Off the Foreign Land setup scripts☆64Updated this week
- Tool to aid in dumping LSASS process remotely☆38Updated 7 months ago
- .NET deserialization hunter☆76Updated 7 months ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆106Updated 10 months ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆88Updated 2 years ago
- A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust☆83Updated 10 months ago
- ☆114Updated last year
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆135Updated 7 months ago
- Adversary Emulation Framework☆87Updated 7 months ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆110Updated 10 months ago