WdToggle

Credential cache

A tool to enable WDigest credential caching using direct system calls in Cobalt Strike

A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.

GitHub

213 stars
15 watching
31 forks
last commit: over 3 years ago

Related projects:

RepositoryDescriptionStars
outflanknl/inlinewhispersTool to generate inline assembly code for direct system calls in COBalt Strike's Beacon Object Files (BOF)308
hagrid29/bof-creduiA C-based tool for invoking Windows credential prompt using the CredUIPromptForWindowsCredentials API18
outflanknl/helpcolorLists available Cobalt Strike beacon commands and colors them based on their type191
outflanknl/c2-tool-collectionTools for exploiting vulnerabilities in Windows systems and gathering information about networked computers.1,155
riccardoancarani/bofsUtilities for Cobalt Strike's Beacon Object Files to simplify working with shellcode and system processes112
espressocake/beacondownloadsyncTools to synchronize files from Cobalt Strike Downloads entries in the data model.92
outflanknl/findobjects-bofAn exploit tool that uses direct system calls to enumerate processes based on specific loaded modules or process handles266
boku7/halosgate-psA Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.95
outflanknl/spray-adAutomates an Active Directory password spraying attack to identify weak or guessable passwords426
pwn1sher/cs-bofsA collection of compiled beacon object files from the CobaltStrike platform.101
wkl-sec/malleable-cs-profilesA collection of tools to generate and modify shellcode profiles to evade detection in Cobalt Strike384
dfed/cacheadvanceA high-performance cache for logging systems38
nccgroup/scomdecryptTool for decrypting RunAs credentials stored in SCOM servers119
cobalt-strike/bof-vsA Beacon Object File Visual Studio template project for creating malicious code executables145
ztgrace/changemeA tool designed to detect default and backdoor credentials by scanning various protocols1,457