RID-Hijacking
by r4wd3r
Windows RID Hijacking persistence technique
AI summary
Privilege Hijacking
A Windows persistence technique using PowerShell to hijack user privileges by modifying security attributes of an existing account.
- stars
- 166
- forks
- 43
- watching
- 12
Similar projects
Found by comparing what the projects do, not just their names.
Persistence scanner
A PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts by scanning for various persistence techniques.
Malware detector
Scans for and identifies malicious system modifications
Process hijacker
A tool that utilizes an old driver to bypass user-mode access controls and inject malicious code into processes
Post exploit toolkit
A post exploitation framework designed to assist in persistence, reconnaissance, and privilege escalation on Linux systems
Rootkit
A proof-of-concept Windows kernel-mode rootkit designed to demonstrate legitimate communication channel exploitation for remote control.
Persistence hunter
A tool for triaging and hunting Windows persistence mechanisms, providing forensic insights into system activity.
Reverse shell
A tool providing a reverse shell connection through HTTP/S protocol with evasion techniques
RDP Exploit Tool
Tools to exploit remote desktop sessions using NTLM and Kerberos authentication
nivekuil/rip1.5K
Deletion tool
A safer alternative to rm with features like file backup and undo functionality
System auditor
A PowerShell script that audits Windows Workstations or Servers to ensure security and compliance.
Persistence tactics
Demonstrates various persistence methods used by malware
RTU exploit
A tool that exploits vulnerabilities in Sixnet RTUs to gain root-level access
Autoruns detector
Provides tools to detect and enumerate autorun entries and their associated files on Windows systems.
Key exchange exploit
An implementation of a proof-of-concept attack exploiting a vulnerability in Diffie-Hellman key exchange for denial-of-service
Memory analyzer
Automated tool for forensic analysis of Windows memory dumps
