kara-4search Goto Github PK

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spectre

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

spoolfool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

sweetpotato-1

Modifying SweetPotato to support load shellcode and webshell

syscall_shellcodeload_csharp

Load shellcode via syscall

tangledwinexec

PoCs and tools for investigation of Windows process execution techniques

taskschedule-persistence-download-cradles

Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged

tdl

Driver loader for bypassing Windows x64 Driver Signature Enforcement

temptest

test

tenet

A Trace Explorer for Reverse Engineers

terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

test

test

threadhijacking_csharp

Process inject technique "Thread hijacking" via csharp

titan

Golang C2 and Beacon/Agent built from the ground up for scalability and expandability

uac-bypass-using-dll-injection

A small project to bypass UAC in windows 10/8/7 using dll injection technique

ucantseem3

Hiding your process in ProcessHacker,Task Manager,etc by patching NtQuerySystemInformation

umium

Class containing Anti-RE, Anti-Debug and Anti-Hook methods. Made for C++/CLI

vba-runpe

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

veracryptthief

Extracting clear-text passwords from VeraCrypt.exe using API hooking

visual-studio-bof-template

A Visual Studio template used to create Cobalt Strike BOFs

vulnerability-write-ups

This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.

vulnerabilitypoc

vulnserver

Vulnerable server used for learning software exploitation

whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

win32kernelstl

Using C++ STL on Windows kernle development

windefenderkiller

Windows Defender Killer | C++ Code Disabling Permanently Windows Defender using Registry Keys

windows-kernel-exploits

Some of my windows kernel exploits for learning purposes

windowselevation

Windows Elevation(持续更新)

windowseventlogsbypass_csharp

Bypass windows eventlogs & Sysmon