rmdavy/WordAmsiBypass rmdavy/WordAmsiBypass

  • Stars
    star
    35
  • Rank 725,330 (Top 15 %)
  • Language
  • License
    Apache License 2.0
  • Created over 4 years ago
  • Updated over 1 year ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
rmdavy/WordAmsiBypass
github

rmdavy

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

More Repositories

1

HeapsOfFun

AMSI Bypass Via the Heap
VBA
103
star
2

AMSI_Ordinal_Bypass

Bypass AMSI and Defender using Ordinal Values
VBA
38
star
3

VBAFunctionPointers

VBA
20
star
4

AmsiPEBWalkVBA

Walking the PEB in VBA
VBA
20
star
5

redtest

PowerShell
16
star
6

AmsiPEBWalkVBAx64

VBA
14
star
7

hashmatch

Audits AD hashdump and looks for instances for password reuse
Python
13
star
8

badodf

Creates a malicious ODF document help leak NetNTLM Creds
Python
12
star
9

enumprocmodules

Get Amsi Function Addresses Using EnumProcessModules & Half a Peb walk
VBA
6
star
10

PasswordAuditor

Password Auditor generates various useful outputs for reporting when conducting a Windows based password Audit
Python
5
star
11

ntlmrelayx-wrap

Wrapper Code for Impacket NTLMRelayX
Python
3
star
12

reads

REsponder Active Database Sifter
Python
3
star
13

nexport

Nessus Parsing Tool
Python
2
star
14

pathchecker

Checks if folders in PATH are writable
Go
2
star
15

qdsp

Quick and Dirty SPN Parser
Python
1
star
16

ipfreely

Python
1
star
17

hash2spray

make spraying a little easier
Python
1
star
18

Kerberoasting

I have created a small C# project that requests a Ticket Granting Service ticket using KerberosSecurityTokenProvider to use for Kerberoasting. I started the project for educational purposes only, but the tool works fine and is not detected by Microsoft Defender for Identity.
C#
1
star