gavz Goto Github PK

reflective-driver-loader

reflective-polymorphism

Reflective Polymorphism

reflective-rewrite

Attempt to rewrite StephenFewers Reflective DLL Injection to make it a little more stealthy. Some code taken from Meterpreter & sRDI. Currently a work in progress.

reflective_psexec

reflective_schtasks

reflectivedll_patch

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

reflectivedllrefresher

Universal Unhooking

reflectiveinjection

反射式注入

reflectivepotato

MSFRottenPotato built as a Reflective DLL. Work in progress. Gotta love Visual C++

reflectivesoinjection

Reflective SO injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

reg1c1de

Registry permission scanner written in C# for finding potential privesc avenues within registry

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

registrationfreecom

Inject DLL Prototype using Microsoft.Windows.ACTCTX COM Object

registry-recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon

registrystrikesback

regmon

Registry tracker

rehepapp

New improved corpus distillation toolset that has helped to found tens of vulnerabilities in MS and Adobe products

reinschauer

it is very good

relative-url-extractor

A small tool that extracts relative URLs from a file.

reliableubootdumper

Python tool for dumping flash via uboot reliably

relocation-section-editor

This program allows to edit the relocation table into a Portable Executable file

relocbonus

relocbonusslides

Slides for my Relocation Bonus talk at DEFCON 26

remap-memory-region

Basic example of how to change the initial rights on a memory region during runtime.

remcom

Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)

remotedebugview

A DLL that serves OutputDebugString content over a TCP connection

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

remotepspy

RemotePSpy provides live monitoring of remote PowerShell sessions, which is particularly useful for older (pre-5.0) versions of PowerShell which do not have comprehensive logging facilities built in.