flamelu Goto Github PK

cve-2023-3079

detection-ideas-rules

Detection Ideas & Rules repository.

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

edge-vulnerability-reports

Security issues I reported in Edge

elkeid

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

gdiobjdump

heap-exploitation-in-real-world

hevd-exploits

Devloped proof-of-concept exploits for the HEVD driver, exploits developed to work on Windows 7, Windows 8, and Windows 10, with and without various mitigation bypasses

hips-hids_cvemod

CVE主防(HIPS/HIDS)

installerfiletakeover

invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

kernelforge

A library to develop kernel level Windows payloads for post HVCI era

lockbit-black-builder

lsass-shtinkering

micro8

Gitbook

ntdlll-unhooking-collection

different ntdll unhooking techniques : unhooking ntdll from disk, from KnownDlls, from suspended process, from remote server (fileless)

paper_collection

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

ppldump

Dump the memory of a PPL with a userland exploit

presentation

presentations

A repository for my conference presentations

presentations-1

printnightmare

pypykatz

Mimikatz implementation in pure Python

razereop

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

rpcfirewall