haunted-banshee Goto Github PK

core-nim-programming

Nim 核心编程

cosmapper

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

crimex

Payload Loader generator with Nimlang

dllsideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

dogcs4.4

cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)

edrs

edrsilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

erebusgate

ErebusGate for Nim Bypass AV/EDR

haunted-banshee

nim-bypass-etw-nttraceevent

Nim Bypass etw For NtTraceEvent

nim-hide

windows API to hide console window by Nimlang

nimlinewhispers3

A tool for converting SysWhispers3 syscalls for use with Nim projects

no-defender

A slightly more fun way to disable windows defender. (through the WSC api)

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

rsa-crypter

A Python2 Script Which Will Use The RSA Encryption Algorithm to encrypt any malicious payload and make it fully undetectable!

shellcode-hastur

Shellcode Reductio Entropy Tools

signed-loaders

signed-loaders documents Windows executables that can be used for side-loading DLLs.

win32_offensive_cheatsheet

Win32 and Kernel abusing techniques for pentesters

wowgrail

PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)