werdhaihai / msi_lateral_mvLinks
Lateral Movement Bof with MSI ODBC Driver Install
☆67Updated this week
Alternatives and similar repositories for msi_lateral_mv
Users that are interested in msi_lateral_mv are comparing it to the libraries listed below
Sorting:
- Internal Monologue BOF☆70Updated 9 months ago
- Terms of Use Conditional Access M365 Evilginx Phishlet☆41Updated 3 months ago
- A python script that automates a C2 Profile build☆47Updated 3 weeks ago
- ForsHops☆149Updated 6 months ago
- Random BOFs for LDAP tradecraft☆65Updated 3 weeks ago
- ☆49Updated 5 months ago
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆131Updated 3 months ago
- Impersonate Tokens using only NTAPI functions☆80Updated 5 months ago
- Local SYSTEM auth trigger for relaying - X☆138Updated 2 months ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆126Updated last month
- A C# project that builds a Web Application which redirects all HTTPS☆26Updated 7 months ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆51Updated 6 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆51Updated 4 months ago
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆102Updated 11 months ago
- AzureAD beacon object files☆127Updated 9 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆74Updated last year
- ☆122Updated 8 months ago
- 🧠 The ultimate, community-curated resource for Beacon Object Files (BOFs) — tutorials, how-tos, deep dives, and reference materials.☆85Updated 3 weeks ago
- A hoontr must hoont☆97Updated last month
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆97Updated last month
- Demo code JavaScript POC that tricks user into sending Windows hash to responder☆35Updated 3 months ago
- Blog/Journal on how to backdoor VSCode extensions☆74Updated 2 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Updated last year
- ☆57Updated 7 months ago
- Proxy function calls through the thread pool with ease☆29Updated 7 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆12Updated 2 months ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆102Updated 4 months ago
- Local SYSTEM auth trigger for relaying☆160Updated 2 months ago
- Windows Thread Pool Injection Havoc Implementation☆32Updated last year
- Lateral movement with DCOM DLL hijacking☆140Updated 2 months ago