tobiohlala / PSMemoryLinks
Automation Capable Multi Search 64 Bit Windows Memory Scanner
☆28Updated 4 years ago
Alternatives and similar repositories for PSMemory
Users that are interested in PSMemory are comparing it to the libraries listed below
Sorting:
- ☆28Updated 7 years ago
- Protect your servers with a secret header☆29Updated 5 years ago
- ☆14Updated 5 years ago
- C# code to run PIC using CreateThread☆17Updated 6 years ago
- POC code to crash Windows Event Logger Service☆27Updated 4 years ago
- Walking the PEB in VBA☆24Updated 5 years ago
- ☆20Updated 6 years ago
- AppXSVC Service race condition - privilege escalation☆28Updated 6 years ago
- Microsoft Applocker evasion tool☆39Updated 5 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆20Updated 4 years ago
- C# Implementation of Jared Atkinson's Get-InjectedThread.ps1☆54Updated 4 years ago
- Spin up a reverse proxy quickly on Heroku☆14Updated 4 years ago
- treafik fronted c2 examples☆26Updated 4 years ago
- Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.☆47Updated 4 years ago
- ☆25Updated 7 years ago
- Send and receive messages over Named Pipes asynchronously.☆39Updated 3 years ago
- Everything related to Cobalt Strike☆15Updated 5 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆33Updated 5 years ago
- ☆16Updated 5 years ago
- Obtains a crackable hash for the current user account☆23Updated 6 years ago
- DLL hijacking vulnerability scanner and PE infector tool☆18Updated 7 years ago
- This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…☆21Updated 5 years ago
- Experiments on the Windows Internals☆30Updated 5 years ago
- Tool to manage user privileges☆29Updated 5 years ago
- AMSI detection PoC☆32Updated 5 years ago
- A script that can be deployed to Azure App for C2 / Proxy / Redirector☆38Updated 6 years ago
- leaking net-ntlm with webdav☆26Updated 4 years ago
- Extracts Azure authentication tokens from PowerShell process minidumps.☆23Updated 2 years ago
- A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.☆19Updated 4 years ago
- A PowerShell script to prevent Sysmon from writing its events☆16Updated 5 years ago