XiaoliChan
|
9378d074d8
|
[VBS] Bypass Cortex
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2026-04-26 17:27:55 +08:00 |
|
XiaoliChan
|
143975dca0
|
[Hashdump] Support NTDS Dump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-10-13 17:31:00 +08:00 |
|
XiaoliChan
|
681cc87406
|
[Module] Add hashdump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-10-13 14:59:37 +08:00 |
|
XiaoliChan
|
138f8249b8
|
Bypass Defender
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2024-04-07 17:45:30 +08:00 |
|
XiaoliChan
|
d05a622f2d
|
[Rid-Hijack] Use vbscript to grant access permission.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-08 11:28:33 +08:00 |
|
XiaoliChan
|
7bb181ca31
|
[Exec-command] Add codec argument in semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 19:09:03 +08:00 |
|
XiaoliChan
|
d8877a6baa
|
[Exec-command] Improve clear function
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 15:22:58 +08:00 |
|
XiaoliChan
|
d2cf35384f
|
[Exec-command] Base64 encode path to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 11:24:48 +08:00 |
|
XiaoliChan
|
37f7fc9516
|
[Exec-command] Add semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-05 16:18:13 +08:00 |
|
XiaoliChan
|
0ae0626e1d
|
[Filetransfer] Base64 encode filename to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 17:42:46 +08:00 |
|
XiaoliChan
|
79552e7796
|
[Exec-command] Encode command as base64 strings to avoid latin-1 encode error.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 15:29:56 +08:00 |
|
XiaoliChan
|
66622ce41e
|
[New module] RID-Hijack
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-28 18:33:31 +08:00 |
|
XiaoliChan
|
5dd8ce5d39
|
[Enhancement] Support old version system under NT6
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-16 15:22:25 +08:00 |
|