gh057pr1nc3 Goto Github PK

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

reverse-engineering

List of awesome reverse engineering resources

rpc-backdoor

A basic emulation of an "RPC Backdoor"

rust_bof

Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.

sauroneye

Search tool to find specific files containing specific words, i.e. files containing passwords..

scripts

Small scripts that make life better

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securityfever

PowerShell Module with custom functions and cmdlets related to Windows and application security.

sharpallthethings

The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.

shellghost

A memory-based evasion technique which makes shellcode invisible from process start to end.

shhhloader

Syscall Shellcode Loader (Work in Progress)

smb_scanner

Tool scan EternalBlue by golang

smbghost_rce_poc

ssh-putty-login-bruteforcer

Turn PuTTY into an SSH login bruteforcing tool.

sysmonquiet

RDLL for Cobalt Strike beacon to silence sysmon process

threadlessinject

Threadless Process Injection using remote function hooking.

threadlessinject-bof

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

vba-runpe

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

vmdetector

Detect virtual machine environments using C#

webshell-scan

Simple web shell scanner written in Golang.

wmeye

WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement

wmi_backdoor

A PoC WMI backdoor presented at Black Hat 2015

xlsxpoison

Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)

zipexec

A unique technique to execute binaries from a password protected zip