Mr-Un1k0d3r/Elevate-System-Trusted-BOF

Stars
132
Rank 274,205 (Top 6 %)
Language
C
Created over 1 year ago
Updated over 1 year ago

Mr-Un1k0d3r/Elevate-System-Trusted-BOF

Mr-Un1k0d3r

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Elevate-System-Trusted-BOF

This BOF can be used to elevate the current beacon to SYSTEM and obtain the TrustedInstaller group privilege. The impersonation is done through the SetThreadToken API.

Compiling

gcc elevate_x64.c -c -o elevate_x64.o

Usage

inline-execute C:\elevate_x64.o

Credit

Mr.Un1k0d3r RingZer0 Team

EDRs

PowerLessShell

Run PowerShell command without invoking powershell.exe

DKMC

DKMC - Dont kill my cat - Malicious payload evasion tool

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

RedTeamPowershellScripts

Various PowerShell scripts that may be useful during red team exercise

MaliciousMacroGenerator

Malicious Macro Generator

ThunderShell

Python / C# Unmanaged PowerShell based RAT

RedTeamCSharpScripts

C# Script used for Red Team

RedTeamCCode

Red Team C code repo

CatMyPhish

Search for categorized domain

PoisonHandler

lateral movement techniques that can be used during red team exercises

MaliciousClickOnceGenerator

Quick Malicious ClickOnceGenerator for Red Team

ADHuntTool

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

Windows-SignedBinary

.NetConfigLoader

.net config loader

Shellcoding

Shellcoding utilities

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

WindowsDllsExport

A list of all the DLLs export in C:\windows\system32\

AMSI-ETW-Patch

Patch AMSI and ETW

DLLsForHackers

Dll that can be used for side loading and other attack vector.

MaliciousDLLGenerator

DLL Generator for side loading attack

SCT-obfuscator

Cobalt Strike SCT payload obfuscator

RedTeamScripts

Repo with various Red Team scripts

Cookie-Graber-BOF

C or BOF file to extract WebKit master key to decrypt user cookie

SPFAbuse

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

RemoteProcessInjection

C# remote process injection utility for Cobalt Strike

Base64-Obfuscator

Simple PowerShell Base64 encoder to avoid detection of your malicious payload

SearchIPOwner

Search public IP owner through ARIN

RedTeamFSharp

Red Team Toolset written in F# (Experimental)

SideChannelAttack

Side Channel script

BOFCode

Bunch of BOF files

blog.mr.un1k0d3r.com

Mr.Un1k0d3r.com blog

MsGraphFunzy

Scripts to interact with Microsoft Graph APIs