trustedsec / inProc_Evade_Get-InjectedThread
PoC code from blog
☆16Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for inProc_Evade_Get-InjectedThread
- C# code to run PIC using CreateThread☆16Updated 5 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆20Updated 3 years ago
- RID Hijacking Proof of Concept script by Kevin Joyce☆15Updated 6 years ago
- ☆14Updated 5 years ago
- ☆14Updated 4 years ago
- Source code in Win32 ASM and C for a shellcode execution wrapper designed to mitigate the risk of shellcode execution on a host other tha…☆19Updated 8 years ago
- ☆28Updated 6 years ago
- Python script to patch the reflective stub in a DLL☆24Updated 7 years ago
- Extended Process List (Search functionality)☆27Updated 3 years ago
- A C port of b33f's UrbanBishop☆37Updated 4 years ago
- The Hunt for Malicious Strings☆11Updated 4 years ago
- Spin up a reverse proxy quickly on Heroku☆13Updated 3 years ago
- Convert Empire profiles to Apache mod_rewrite scripts☆27Updated 5 years ago
- Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)☆25Updated 4 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆13Updated 6 years ago
- Modifies machine.config for persistence after installing signed .net assembly onto GAC☆11Updated 2 years ago
- ☆24Updated 6 years ago
- C# Implementation of Get-VaultCredential☆13Updated 6 years ago
- Ransoblin (Ransomware Bokoblin)☆17Updated 4 years ago
- SSDP Service Discovery☆16Updated 5 years ago
- Miscellaneous examples for use with Cobalt Strike Beacon☆10Updated 4 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆32Updated 4 years ago
- A script that can be deployed to Azure App for C2 / Proxy / Redirector☆35Updated 5 years ago
- Protect your servers with a secret header☆28Updated 4 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Updated 3 years ago
- A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates☆24Updated 6 years ago
- Execute Shellcode And Other Goodies From MMC☆12Updated 9 years ago