13 Commits

Author SHA1 Message Date
XiaoliChan 9378d074d8 [VBS] Bypass Cortex
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2026-04-26 17:27:55 +08:00
XiaoliChan 143975dca0 [Hashdump] Support NTDS Dump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-10-13 17:31:00 +08:00
XiaoliChan 681cc87406 [Module] Add hashdump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-10-13 14:59:37 +08:00
XiaoliChan 138f8249b8 Bypass Defender
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2024-04-07 17:45:30 +08:00
XiaoliChan d05a622f2d [Rid-Hijack] Use vbscript to grant access permission.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-08 11:28:33 +08:00
XiaoliChan 7bb181ca31 [Exec-command] Add codec argument in semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 19:09:03 +08:00
XiaoliChan d8877a6baa [Exec-command] Improve clear function
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 15:22:58 +08:00
XiaoliChan d2cf35384f [Exec-command] Base64 encode path to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 11:24:48 +08:00
XiaoliChan 37f7fc9516 [Exec-command] Add semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-05 16:18:13 +08:00
XiaoliChan 0ae0626e1d [Filetransfer] Base64 encode filename to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 17:42:46 +08:00
XiaoliChan 79552e7796 [Exec-command] Encode command as base64 strings to avoid latin-1 encode error.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 15:29:56 +08:00
XiaoliChan 66622ce41e [New module] RID-Hijack
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-28 18:33:31 +08:00
XiaoliChan 5dd8ce5d39 [Enhancement] Support old version system under NT6
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-16 15:22:25 +08:00