daffodi1 Goto Github PK

interceptiondemo

Sample showing the use of CoGetInterceptor

juicy_2

juicypotato for win10 > 1803 & win server 2019

kernelcallbacktable-injection

Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html

key08.com

web security tools source list from Hax Wiki

lcx

自修改免杀lcx端口转发工具

lm_tools

横向移动三剑客 ( Lateral movement tools)

love_box

微信小程序，恋爱盲盒

mapping-injection

Just another Windows Process Injection

microsoft-diagcab-rce-poc

Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution

my_tsrc_paper

向TSRC投稿的文章，对应的pdf，代码和思维导图

nautilusproject

A collection of weird ways to execute unmanaged code in .NET

ning

GuruReader iOS APP

nlscodeinjectionthroughregistry

Dll injection through code page id modification in registry. Based on jonas lykk research

ntcreateuserprocess_

obfy

A tiny C++ obfuscation framework

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

pagetableinjection

Code Injection, Inject malicious payload via pagetables pml4.

passuac

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peresourceinject

poc

Proofs-of-concept

ppid-spoofing

POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritting ntdll:LdrInitializeThunk with shellcode.

pr0cess

some gadgets about windows process and ready to use :)

privfu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

process_overwriting

Yet another variant of Process Hollowing

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

python-zhihuishu

Python 知到（智慧树）一键刷课，秒刷

r77-rootkit

Ring 3 rootkit with single file installer and fileless persistence that hides processes, files, network connections, etc.

rayon

yet another SSH machine manager

redpeanut

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.