massimiliano-dalcero Goto Github PK

abuseacl

A python script to automatically list vulnerable Windows ACEs/ACLs.

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

attiny85

RubberDucky like payloads for DigiSpark Attiny85

cefpython

Chrome browser control, a HTML 5 based Python GUI framework.      :speech_balloon: Forum:

chisel

A fast TCP/UDP tunnel over HTTP

cybersecuritydocs

d1rkinject

Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, and reverting back memory protections and original memory state

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

edrsilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

ezuri

A Simple Linux ELF Runtime Crypter

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

filemonitorexample

A C# File Monitor Example With File Monitor Filter Driver SDK, to demo how to monitor the file activities on file system level, capture file open, create, overwrite, read, write, query file information, set file information, query security information, set security information, file rename, file delete, directory browsing and file close I/O requests.

huan

Encrypted PE Loader Generator

khepri

🔥🔥🔥Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++.

night_walker

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

puff

an easy and json friendly Windows prefetch file parser filterable by date

py_vmware_clone_vm

Examples working with VMware's pyvmomi library

rdpy

Remote Desktop Protocol in Twisted Python

reflective_pe_loader

Program to load a PE inside memory on another process.

sapaap

Parser for SAP Abap audit logs

speakeasy

Windows kernel and user mode emulation.

walkpaper

Gnome-shell extension allowing user to set up different wallpapers for each workspace.

windows-event-id-database

A database of Windows Event ID

windows_ca_certificate_history

Powershell tool for having the list of installed CA certificates sorted by date, useful during the incident phase to check whether suspicious CAs have been installed

wmi_detector

detect malicious artifacts in WMI