Turn a Microsoft-signed binary into a red team implant — no admin rights, no custom signing. ClickOnce delivery via AppDomainManager hijack with shellcode execution, file drop, reverse SSH + SOCKS5 tunnel modes, and a web UI for quick payload generation and deployment.
penetration-testing red-team payload-generator clickonce clickonce-application reverse-ssh-tunnel maldev initial-access dll-sideloading appdomain-injection
-
Updated
Aug 7, 2026 - HTML