Persistence by writing/reading shellcode from Event Log.
The main features of improsec/sharpeventpersist are: Persistence.
Open-source alternatives to improsec/sharpeventpersist include: 0xthirteen/sharpstay — To compile open Visual Studio project and compile for release. antoniococo/sharpyshell — SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications. ben0xa/doucme. blackarrowsec/pivotnacci — Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which… fireeye/sharpersist — Windows persistence toolkit written in C#. For detailed usage information on each technique, see the Wiki. 0x09al/iis-raid — IS Raid is a native IIS module that abuses the extendibility of IIS to backdoor the web server and carry out custom…
To compile open Visual Studio project and compile for release.
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
IS Raid is a native IIS module that abuses the extendibility of IIS to backdoor the web server and carry out custom actions defined by an attacker.