API Browser

Execute arbitrary commands via .NET process execution

Create processes via WMI for command execution

Load arbitrary .NET assemblies for code execution

Download files and execute remote payloads

Allocate memory in remote process for code injection

Steal OAuth tokens from browser storage

SSL certificate bypass

Access 169.254.169.254 to steal temporary credentials

Load DLL libraries in process memory

Write values to Windows Registry for persistence

Install system-wide hooks for keylogging/monitoring

Read sensitive data from remote process memory

Invoke methods dynamically via .NET reflection

Send emails for C2 communication or data exfiltration

Create named pipes for inter-process communication

Write entries to Windows Event Log for evasion

Download remote scripts and payloads

Create Access database for code execution

Execute commands via COM shell interface

Create registry keys for persistence

File system operations via COM scripting

Execute shell commands via Windows Script Host

Download files via XML HTTP requests

Access Outlook for data theft or spam campaigns

Execute code via PowerShell reflection API

Remote command execution via DCOM/WMI

Code execution through Access macro execution

Download payloads over HTTPS

Write shellcode into remote process memory