zblurx / impersonate-rsLinks
Rusty Impersonate
☆102Updated 2 months ago
Alternatives and similar repositories for impersonate-rs
Users that are interested in impersonate-rs are comparing it to the libraries listed below
Sorting:
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆121Updated last year
- Simple BOF to read the protection level of a process☆119Updated 2 years ago
- Your syscall factory☆126Updated last week
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated 2 years ago
- ☆136Updated 10 months ago
- ☆109Updated 10 months ago
- Detect EDR's exceptions by inspecting processes' loaded modules☆130Updated last year
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆102Updated 3 years ago
- Lateral Movement via the .NET Profiler☆84Updated last year
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆122Updated last year
- ☆115Updated last year
- Find DLLs with RWX section☆80Updated 2 years ago
- ☆137Updated 2 years ago
- ☆122Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆117Updated 2 years ago
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆97Updated last year
- Sliver extension performing TCP redirection tasks without performing cross-process injection.☆68Updated 11 months ago
- Implant drop-in for EDR testing☆147Updated 2 years ago
- Python module for running BOFs☆79Updated 2 weeks ago
- A hoontr must hoont☆101Updated 3 weeks ago
- ☆88Updated 3 years ago
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆146Updated last year
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆76Updated 2 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆85Updated 8 months ago
- A BOF to enumerate system process, their protection levels, and more.☆123Updated last year
- ☆122Updated 4 years ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆118Updated last year
- A collection of various and sundry code snippets that leverage .NET dynamic tradecraft☆146Updated last year
- Find .net assemblies locally☆127Updated 3 years ago
- Python3 rewrite of AsOutsider features of AADInternals☆58Updated 4 months ago