0xvm Goto Github PK

0xvm.github.io

acheron

indirect syscalls for AV/EDR evasion in Go assembly

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

amsibypass.cs

yet another amsi.dll

apcldr

Payload Loader With Evasion Features

aquarmoury

My musings in C and offensive tooling

atomldr

A DLL loader with advanced evasive features

bashbunny-payloads

Payloads for the Hak5 Bash Bunny

blobrunner

Quickly debug shellcode extracted during malware analysis

blockzone

A faithful recreation of the original DOS font.

bloodhoundqueries

c_syscalls

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

callback

Execute Mimikatz in shellcode format, uses native API VirtualAlloc and EnumSystemGeoID

cheatsheets

Cheat sheets for various projects.

clrvoyance

Managed assembly shellcode generation

cobalt-wipe

Cobalt wipe is the non-commercial version of Cobalt-Strike 4.3 (May 2021 Release)

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

creds

Some usefull Scripts and Executables for Pentest & Forensics

csharp_reverse_shell

c# reverse shell poc

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dll_keylog

win64 keylogger compiled as dll

edrs

falconeye

flare-kscldr

FLARE Kernel Shellcode Loader

hwbp4mw

impacket-static-binaries

Impacket static binaries, because you never know when you'll need them.

injection

inteloops

Exploits Intel's signed iqvw64e.sys driver to allow manual mapping and read/writing of memory at a kernel level.

jlaive-1

Antivirus evasion tool (crypter) that converts executables into undetectable batch files.

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).