Remotely dump NT hashes through Windows Crash dumps
☆36Apr 23, 2026Updated 6 months ago
Alternatives and similar repositories for Forensike
Users that are interested in Forensike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- C# implementation of the process injection techniques dubbed "PoolParty"☆18Nov 7, 2025Updated last year
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆26Nov 14, 2025Updated 11 months ago
- Windows Service with the implementation of the Process hollowing technique to run shellcode☆13Jul 20, 2023Updated 3 years ago
- Recon scripts for Red Team and Web blackbox auditing☆23Mar 3, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- Local SYSTEM auth trigger for relaying☆175Jul 22, 2025Updated last year
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- Python3 rewrite of AsOutsider features of AADInternals☆65Sep 18, 2026Updated last month
- ☆18Feb 14, 2019Updated 7 years ago
- Tools for interacting with authentication packages using their individual message protocols☆448Aug 1, 2026Updated 3 months ago
- A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation☆38Jul 30, 2026Updated 3 months ago
- ☆20Aug 10, 2022Updated 4 years ago
- ☆143Nov 17, 2025Updated 11 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Dump the memory of any PPL with a Userland exploit chain☆351Mar 17, 2023Updated 3 years ago
- ☆11Mar 24, 2026Updated 7 months ago
- ☆28Aug 12, 2023Updated 3 years ago
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆107Mar 8, 2023Updated 3 years ago
- 适用于某EHR&HRM的加解密工具，可直接用于sqlmap☆26Jan 14, 2024Updated 2 years ago
- PoC for detecting and evading ETW detection of .Net Assembly.Load☆22Aug 26, 2020Updated 6 years ago
- Tool developed using csharp (.net 4.5) for compressing and encrypting files to shorten transfer times. Supports multi-file compression an…☆14Feb 15, 2024Updated 2 years ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆250Jun 11, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆384Aug 28, 2026Updated 2 months ago
- Hybrid AD utilities for ROADtools☆111May 25, 2025Updated last year
- ☆215May 29, 2024Updated 2 years ago
- C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)☆61Apr 13, 2023Updated 3 years ago
- UAC Bypass using UIAccess program QuickAssist☆245Jul 19, 2026Updated 3 months ago
- 反取证程序，类似usbkill☆10Apr 22, 2023Updated 3 years ago
- DPAPI looting in Python☆576Oct 27, 2026Updated last week
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆140Mar 3, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Step-by-step documentation on how to decrypt SCCM database secrets offline☆50Oct 20, 2025Updated last year
- ☆19Jul 16, 2024Updated 2 years ago
- A multi coroutine concurrent batch URL survival detection tool written in Go, with concurrency determined by CPU by default.一个go编写的多协程并发批…☆12Jan 9, 2024Updated 2 years ago
- A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks☆189Aug 16, 2025Updated last year
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆615Aug 17, 2026Updated 2 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆235Oct 18, 2022Updated 4 years ago
Are these results useful?