rnmx Goto Github PK

hwsyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

inceptor

Template-Driven AV/EDR Evasion Framework

inflativeloading

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

invoke-sharploader

juicypotatong

Another Windows Local Privilege Escalation from Service Account to System

kdexploitme

A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.

lans.py

Inject code, jam wifi, and spy on wifi users

lethalhta

Lateral Movement technique using DCOM and HTA

maldev-essentials-assignment

Malware Development Essentials Assignment, by sektor7

mana

Our mana toolkit for wifi rogue AP attacks and MitM - see hostapd-mana too

memoryloader

A .NET binary loader that bypasses AMSI

messageboxshellcode

PIC shellcode to run MessageBoxW

metasploit-framework

Metasploit Framework

mimikat_ssp

Security Support Provider Interface

mitm6

pwning IPv4 via IPv6

monikerfun

Demonstrating a simple moniker.

net-assembly-inject-remote

.NET assembly local/remote loading/injection into memory.

netloader

Loads any C# binary in mem, patching AMSI + ETW.

netripper

NetRipper - Smart traffic sniffing for penetration testers

niximports

A .NET malware loader, using API-Hashing to evade static analysis

patchlessclrloader

.NET assembly loader with patchless AMSI and ETW bypass

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

powershell-suite

My musings with PowerShell

printnightmare-cve-2021-34527

PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits

rdpstrike

Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.

redteampowershellscripts

Various PowerShell scripts that may be useful during red team exercise

repo

Dummy repo

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

sharp-suite

Also known by Microsoft as Knifecoat :hot_pepper:

sharptransactedload

Load .net assemblies from memory while having them appear to be loaded from an on-disk location.