wolfcod / lsassdump

Related projects ⓘ

Alternatives and complementary repositories for lsassdump

• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆58Updated 3 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆40Updated this week
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆87Updated 9 months ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆82Updated this week
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆70Updated 3 weeks ago
• lap1nou / CLR_Heap_encryption
  ☆95Updated last year
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆74Updated 5 months ago
• deh00ni / NtDumpBOF
  ☆88Updated 2 months ago
• cybersectroll / TrollDump
  ☆79Updated 5 months ago
• tehstoni / tryharder
  C++ Staged Shellcode Loader with Evasion capabilities.
  ☆73Updated last month
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆51Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆59Updated 3 months ago
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆78Updated last year
• rasta-mouse / KerbApp
  ☆27Updated 5 months ago
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆68Updated last year
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆54Updated 2 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated 4 months ago
• xpn / CloudInject
  ☆103Updated 6 months ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆38Updated last year
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆94Updated last year
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆36Updated 10 months ago
• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated 9 months ago
• NVISOsecurity / cs2br-bof
  ☆59Updated 3 months ago
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆62Updated 11 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• rasta-mouse / SpawnWith
  ☆91Updated 8 months ago
• NioZow / bof-collection
  ☆20Updated 2 months ago
• 0xsp-SRD / 0xsp.com
  a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab
  ☆53Updated 6 months ago