zcgonvh / TaskSchedulerMiscLinks
Misc TaskScheduler Plays
☆235Updated 3 years ago
Alternatives and similar repositories for TaskSchedulerMisc
Users that are interested in TaskSchedulerMisc are comparing it to the libraries listed below
Sorting:
- A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/☆192Updated 4 years ago
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆365Updated 2 years ago
- ☆243Updated 2 years ago
- Offensive tools written for practice purposes☆162Updated 3 years ago
- Beacon.dll reverse☆141Updated 4 years ago
- GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisp…☆329Updated last year
- Dumping LSASS with a duplicated handle from custom LSA plugin☆202Updated 3 years ago
- more conveniently Visual-Studio-BOF-template☆71Updated 2 years ago
- ☆92Updated 4 years ago
- Load shellcode via syscall☆55Updated 4 years ago
- Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.☆208Updated 3 years ago
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆89Updated 2 years ago
- Beacon compiled using clang☆72Updated 2 years ago
- Bypass Detection By Randomising ROR13 API Hashes☆144Updated 3 years ago
- Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.☆16Updated 3 years ago
- Another shellcode runner 🦀 🐚☆147Updated 4 years ago
- CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)☆298Updated 4 years ago
- 基于Tinynuke修复得到的HVNC☆186Updated 4 years ago
- C Sharp codes of my blog.☆187Updated 3 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆399Updated 2 years ago
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆78Updated last year
- 关于RPC一些绕EDR的tips☆194Updated 2 years ago
- Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.☆128Updated 3 years ago
- A little tool to play with the Seclogon service☆325Updated 3 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆66Updated last month
- Go implementation of the self-deletion of an running executable from disk☆112Updated 2 years ago
- Beacon Object File (BOF) Creation Helper☆234Updated 3 years ago
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆68Updated 3 years ago
- A Visual Studio template used to create Cobalt Strike BOFs☆319Updated 4 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆142Updated 3 years ago