winsecurity / AMSI-Bypass-HWBPLinks
☆26Updated 4 months ago
Alternatives and similar repositories for AMSI-Bypass-HWBP
Users that are interested in AMSI-Bypass-HWBP are comparing it to the libraries listed below
Sorting:
- ☆59Updated last year
- Easy peasy file uploads☆29Updated 3 months ago
- BOF for C2 framework☆44Updated last year
- Windows Session Hijacking via COM☆176Updated this week
- Early cascade injection PoC based on Outflanks blog post written in Rust☆59Updated 10 months ago
- Enable or Disable TokenPrivilege(s)☆15Updated last year
- ☆34Updated 5 months ago
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆36Updated this week
- use python on windows with full submodule support without installation☆30Updated 10 months ago
- Cortex EDR Ransomware protection Bypass☆25Updated 10 months ago
- ☆38Updated 8 months ago
- Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll☆45Updated 5 months ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆56Updated 7 months ago
- ☆41Updated 9 months ago
- ☆55Updated 5 months ago
- Tool to obtain hash using MS-SNTP for user accounts☆27Updated 10 months ago
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆30Updated 10 months ago
- Sniffing files generator☆59Updated 9 months ago
- Proxy function calls through the thread pool with ease☆31Updated 9 months ago
- A simple C++ Windows tool to get information about processes exposing named pipes.☆39Updated 9 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆66Updated 10 months ago
- Demo code JavaScript POC that tricks user into sending Windows hash to responder☆36Updated 5 months ago
- Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies☆49Updated 5 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆50Updated 7 months ago
- Permanently disable EDRs as local admin☆122Updated 2 months ago
- bring your own clean ntdll (or other MS dlls)☆28Updated 4 months ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆45Updated last year
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆94Updated 5 months ago
- Mythic C2 wrapper for NimSyscallPacker☆25Updated 8 months ago
- rust port of pspy with support for process monitoring over dbus☆35Updated 5 months ago