xct / adoptLinks
Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.
☆19Updated 3 years ago
Alternatives and similar repositories for adopt
Users that are interested in adopt are comparing it to the libraries listed below
Sorting:
- adws enumeration bof☆154Updated last month
- Local SYSTEM auth trigger for relaying - X☆152Updated 3 months ago
- Internal Monologue BOF☆79Updated 10 months ago
- The DCERPC only printerbug.py version☆152Updated 2 weeks ago
- Lateral Movement Bof with MSI ODBC Driver Install☆134Updated last month
- An impacket-lite cli tool that combines many useful impacket functions using a single session.☆54Updated last month
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆86Updated 8 months ago
- Unauthenticated start EFS service on remote Windows host (make PetitPotam great again)☆104Updated 3 weeks ago
- AzureAD beacon object files☆131Updated 10 months ago
- Lateral Movement via the .NET Profiler☆84Updated 11 months ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆105Updated 6 months ago
- ☆57Updated 8 months ago
- RPC to WebClient startup☆52Updated 2 months ago
- TokenCert☆101Updated last year
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆89Updated 4 months ago
- Lateral movement with DCOM DLL hijacking☆167Updated 4 months ago
- ☆135Updated 9 months ago
- Impersonate Tokens using only NTAPI functions☆81Updated 7 months ago
- Sliver extension performing TCP redirection tasks without performing cross-process injection.☆68Updated 10 months ago
- Sniffing files generator☆59Updated 8 months ago
- Simple BOF to read the protection level of a process☆119Updated 2 years ago
- Find DLLs with RWX section☆80Updated 2 years ago
- ☆115Updated 11 months ago
- The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…☆162Updated 2 months ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆126Updated 2 months ago
- ForsHops☆150Updated 7 months ago
- Local SYSTEM auth trigger for relaying☆165Updated 3 months ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆98Updated 2 years ago
- ☆53Updated last month
- ☆109Updated 8 months ago