nyameeeain Goto Github PK

accesstoken-impersonation

Access Token Manipulation to elevate to system from local admin

adsearch

A tool to help query AD via the LDAP protocol

amsibypasshookmanagedapi

A new AMSI Bypass technique using .NET ALI Call Hooking.

applications-security

arsenal

Cobalt Strike 3.13 Arsenal Kit

asrenum-bof

Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations

binarysharp_compiled

bof-patchit

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

bypass_uac

Bypass UAC Using fodhelper.exe

c2

A basic c2 / agent.

cerbere

clipboardwindow-inject

CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback

cobaltstrike-alpine

Lightweight Cobalt Strike Docker image built on Alpine.

cracking-the-perimeter--lab

cs-autopostchain

基于 OPSEC 的 CobaltStrike 后渗透自动化链

csharpreflectionworkshop

The repository that complements the From zero to hero: creating a reflective loader in C# workshop

custom_tooling

I created Custom Programs/binaries For my engagements. Most of these were created during my engagement period. Now I share a few for educational purposes.

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-28171-poc

cve-2023-21752

cve-2023-24055_poc

CVE-2023-24055 PoC (KeePass 2.5x)

data

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

emailscraper

Email OSINT Phishing

evilgophish

evilginx3 + gophish

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

frameless-bitb

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

fuck-etw

Bypass the Event Trace Windows(ETW) and unhook ntdll.

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

homework-of-c-sharp

C Sharp codes of my blog.