itzdan Goto Github PK

doublestar

A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own techniques

dscompromised

dumpert

LSASS memory dumper using direct system calls and API unhooking.

edge0day.exe

CVE-2020-LOL

eqllib

evil-winrm

The ultimate WinRM shell for hacking/pentesting

evil_evasion_things

eviloffice

Inject Macro and DDE code into Excel and Word documents (reverse shell)

exploit

Exploits and advisories

faction

Faction installer and general issues

fridainject

Inject Frida-Gadget into a local process

genxlm

A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4Macro"

ghostbuild

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

harpoon

inception

Provides In-memory compilation and reflective loading of C# apps for AV evasion.

infinityhook

Hook system calls, context switches, page faults and more.

injection

invoke-sharploader

invoke-usersimulator

Simulates common user behaviour on local and remote Windows hosts.

kibana

lain

A fuzzer framework built in Rust

larrychatter

Covert C2 Framework - PoC HAMMERTOSS Revenant - C2 over Twitter

litehttp

LiteHTTP is an HTTP bot that is being programmed in C#, on the .NET 2.0 dependency.

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malware_analysis

Tools and code snippets related to malware analysis

malwarebazaar-python

MalwareBazaar API wrapper (Abuse.ch)

maskirovkawinter_stage1

Stage 1 - BSides 2017 Released

microsoft-threat-protection-hunting-queries

Sample queries for Advanced hunting in Microsoft Threat Protection

mihari

A framework for continuous OSINT based threat hunting