TrustedPath-UACBypass-BOF
by netero1010
Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.
AI summary
UAC Bypass Tool
Tools and techniques to bypass Windows UAC restrictions on executable files by utilizing DCOM objects
- stars
- 119
- forks
- 38
- watching
- 5
Similar projects
Found by comparing what the projects do, not just their names.
UAC bypass tool
A tool that bypasses UAC restrictions on Windows by deserializing and executing malicious code in Event Viewer.
UAC bypass technique
A technique to bypass Windows UAC security restrictions using a DLL planting method for executing malicious code in high integrity processes.
Beacon utilities
Utilities for Cobalt Strike's Beacon Object Files to simplify working with shellcode and system processes
Payload loader
Loads and executes a malicious payload in a Windows system using PowerShell.
ETW bypass tool
Tool to bypass ETW (Event Tracing for Windows) security measure in remote processes by injecting a custom syscall
BOF executable generator
A Beacon Object File Visual Studio template project for creating malicious code executables
AMSIBypass Tool
A tool that bypasses AMSI in a remote process with code injection.
Process hook remover
Removes API hooks from a malicious process
CASB bypass tool
Bypassing memory scanning to evade detection by the Karbenz CASB (Content Awareness Security Platform) security solution
UAC bypass
Exploits ALPC and mmc to bypass Windows UAC for administrative privileges.
BOF tool
A Cobalt Strike BOF that exploits a vulnerability to add an admin user
ccob/bof.net682
C runtime framework
A .NET runtime framework for developing and executing malicious C code in a managed environment.
Application whitelist bypass list
A centralized resource for bypassing Windows Device Guard Application Whitelisting (WDAC) policies.
ASR scanner
Tools to detect and exploit vulnerabilities in Windows Attack Surface Reduction (ASR) settings
Kernel exploit
Exploits a kernel vulnerability to gain SYSTEM privileges on Windows.
