横向移动三剑客 ( Lateral movement tools)
☆29Nov 16, 2021Updated 4 years ago
Alternatives and similar repositories for lm_tools
Users that are interested in lm_tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2☆19Oct 8, 2020Updated 6 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Read Memory without ReadProcessMemory for Current Process☆88Feb 13, 2022Updated 4 years ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆172Mar 15, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆70May 11, 2022Updated 4 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- bin2json extract recursively file, directory of files (or disk dump) metadata to json☆12Jul 7, 2022Updated 4 years ago
- shadow tls☆18Nov 13, 2022Updated 3 years ago
- A kernel mode Windows rootkit in development.☆46Dec 31, 2021Updated 4 years ago
- Load a dynamic library from memory using a fuse mount☆34Sep 15, 2023Updated 3 years ago
- 扫描常见未授权访问(改)（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）☆15Aug 4, 2020Updated 6 years ago
- Hyper-V sockets☆29Sep 11, 2017Updated 9 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆94Sep 26, 2019Updated 7 years ago
- Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html☆143May 10, 2022Updated 4 years ago
- 关闭恶意驱动的文件和注册表保护☆14Jun 28, 2022Updated 4 years ago
- Windows Research Kernel☆43May 16, 2026Updated 5 months ago
- Titan: A generic user defined reflective DLL for Cobalt Strike☆84Nov 20, 2022Updated 3 years ago
- This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…☆74Feb 11, 2024Updated 2 years ago
- ☆14Nov 29, 2021Updated 4 years ago
- 看起来叫BabyBypass，实际啥都会记一些☆15Sep 10, 2023Updated 3 years ago
- ManageEngine ADManager Command Injection☆11Oct 2, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A simple process query/manipulation tool using driver hooked system call. (2019)☆10Aug 30, 2021Updated 5 years ago
- A poc that abuses Enclave☆40Sep 8, 2022Updated 4 years ago
- windows rpc 使用MIDL+RPC实现HelloWorld☆24Mar 21, 2018Updated 8 years ago
- Various methods of executing shellcode☆75Mar 27, 2023Updated 3 years ago
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago
- Ready-to-use headers for Windows Kernel SSDT indices☆10Apr 12, 2020Updated 6 years ago
- Use NtSetInformationThread(ThreadBreakOnTermination) for anti-debugging☆17Sep 21, 2019Updated 7 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆111May 27, 2021Updated 5 years ago
- fork HoShiMin Avanguard☆20Sep 29, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆30Apr 27, 2024Updated 2 years ago
- Windows NTLMSSP library☆11Oct 13, 2020Updated 6 years ago
- Zerokit shared code☆18Mar 28, 2019Updated 7 years ago
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆74Apr 11, 2022Updated 4 years ago
- Injectable Windows DLL which enforces a W^X memory policy on a process☆15Mar 10, 2017Updated 9 years ago
- ☆25Jan 16, 2021Updated 5 years ago
- ☆20Aug 10, 2022Updated 4 years ago