zblurx / impersonate-rs
Rusty Impersonate
☆95Updated last year
Alternatives and similar repositories for impersonate-rs
Users that are interested in impersonate-rs are comparing it to the libraries listed below
Sorting:
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆93Updated 2 years ago
- Simple BOF to read the protection level of a process☆114Updated 2 years ago
- Adversary Emulation Framework☆98Updated 9 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆113Updated last year
- ☆88Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated last year
- ☆62Updated 2 years ago
- ☆106Updated 2 months ago
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆119Updated 10 months ago
- Implant drop-in for EDR testing☆138Updated last year
- ☆141Updated 3 years ago
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆82Updated 8 months ago
- I have documented all of the AMSI patches that I learned till now☆72Updated last month
- Find DLLs with RWX section☆80Updated last year
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆87Updated 3 months ago
- ☆80Updated 9 months ago
- Lateral Movement via the .NET Profiler☆81Updated 5 months ago
- Detect EDR's exceptions by inspecting processes' loaded modules☆129Updated last year
- ☆110Updated 5 months ago
- Proof of Concept code and samples presenting emerging threat of MSI installer files.☆81Updated 2 years ago
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆76Updated last year
- ForsHops☆131Updated last month
- Python module for running BOFs☆70Updated last year
- ☆128Updated 3 months ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆112Updated last month
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆120Updated 11 months ago
- Example code samples from our ScriptBlock Smuggling Blog post☆90Updated 10 months ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆55Updated 3 years ago
- ☆116Updated 4 years ago
- Python3 rewrite of AsOutsider features of AADInternals☆46Updated 4 months ago