sevagas / Advanced_Initial_access_in_2024_OffensiveXLinks
Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
☆145Updated last year
Alternatives and similar repositories for Advanced_Initial_access_in_2024_OffensiveX
Users that are interested in Advanced_Initial_access_in_2024_OffensiveX are comparing it to the libraries listed below
Sorting:
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆117Updated last year
- Utilities for obfuscating shellcode☆94Updated last month
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆90Updated last year
- ☆119Updated 6 months ago
- ☆71Updated 7 months ago
- A Python POC for CRED1 over SOCKS5☆158Updated last year
- Find .net assemblies locally☆125Updated 3 years ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆207Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆124Updated 2 months ago
- Adversary Emulation Framework☆125Updated 3 months ago
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆182Updated last year
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆139Updated last year
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆120Updated last year
- ☆208Updated last year
- A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).☆93Updated 2 years ago
- ☆135Updated 8 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆166Updated 3 months ago
- Local & remote Windows DLL Proxying☆165Updated last year
- ☆213Updated last year
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆147Updated last week
- Bypass AMSI By Dividing files into multiple smaller files☆46Updated 2 years ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆98Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆91Updated last year
- Decrypt GlobalProtect configuration and cookie files.☆151Updated last year
- ☆192Updated 6 months ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆193Updated 10 months ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆174Updated 7 months ago
- Just some random Red Team Scripts that can be useful☆152Updated last year
- A Mythic Agent written in PIC C.☆201Updated 8 months ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆146Updated last year