gh057pr1nc3 Goto Github PK

.netconfigloader

.net config loader

abcd

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

antimalwareblight

Execute PowerShell code at the antimalware-light protection level.

apt_report

Interesting apt report collection and some special ioc express

at-ps

Adversary Tactics - PowerShell Training

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autoruns

azazaza

bbot

OSINT automation for hackers.

bhusa2018_sysmon

All materials from our Black Hat 2018 "Subverting Sysmon" talk

blue-team-notes

You didn't think I'd go and leave the blue team out, right?

cheesetools

Self-developed tools for Lateral Movement/Code Execution

clrguard

cve-2021-40444

CVE-2021-40444 PoC

debloat-windows-10

A Collection of Scripts Which Disable / Remove Windows 10 Features and Apps

demos

Demos of various injection techniques found in malware

dll_to_exe

Converts a DLL into EXE

dllhijackingscanner

This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

ebooks-for-reverseengineering

edrs

empire

Empire is a PowerShell and Python post-exploitation agent.

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

eviloffice

Inject Macro and DDE code into Excel and Word documents (reverse shell)

gc2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

get-badpasswords

Get insights into the actual strength and quality of passwords in Active Directory.

gobypassav

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。