ImpulsiveDLLHijack
frostbyte
| ImpulsiveDLLHijack | frostbyte | |
|---|---|---|
| 2 | 2 | |
| 467 | 365 | |
| - | - | |
| 0.0 | 0.0 | |
| over 2 years ago | about 2 years ago | |
| C# | C# | |
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ImpulsiveDLLHijack
- GitHub - knight0x07/ImpulsiveDLLHijack: C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.
- C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.
frostbyte
- frostbyte: FrostByte is a PoC project that combines different defense evasion techniques to build better redteam payloads - embed an encrypted shellcode stub into a known signed executable and still manage to keep it signed like how the Zloader malware did.
- FrostByte - A POC project that combines different defense evasion techniques to build better redteam payloads
What are some alternatives?
Lockdoor-Framework - 🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
DPAPISnoop - A C# tool to output crackable DPAPI hashes from user MasterKeys
reconness - ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.
RPCMon - RPC Monitor tool based on Event Tracing for Windows
AggressiveProxy - Project to enumerate proxy configurations and generate shellcode from CobaltStrike
defcon27_csharp_workshop - Writing custom backdoor payloads with C# - Defcon 27 Workshop
CIMplant - C# port of WMImplant which uses either CIM or WMI to query remote systems
PipeViewer - A tool that shows detailed information about named pipes in Windows
CdpSvcLPE - Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)
KRBUACBypass - UAC Bypass By Abusing Kerberos Tickets
HijackLibs - Project for tracking publicly disclosed DLL Hijacking opportunities.