jymcheong,Jym Cheong,github

awesome-windows-kernel-security-development

windows kernel security development

backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

badassmacros

BadAssMacros - C# based automated Malicous Macro Generator.

bat

Bro Analysis Tools (BAT): Processing and analysis of Bro network data with Pandas, scikit-learn, and Spark

batchworm

Worm PoC on batch

beaconhunter

Detect and respond to Cobalt Strike beacons using ETW.

bigtreetech-skr-v1.1

32bit board with LPC1768, support marlin2.0 and smoothieware

bitb

Browser In The Browser (BITB) Templates

bitscout

Remote forensics meta tool

blackbone

Windows memory hacking library

blackout

kill anti-malware protected processes (BYOVD)

bloodhound

Six Degrees of Domain Admin

bluegate

PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610

bluekeep-poc

BlueKeep is a use-after-free vulnerability, meaning that the program tries to use memory after it is supposed to have discarded it. The vulnerability lies in termdd.sys, which is the RDP kernel driver. A user can exploit this by opening an RDP connection to a remote computer called a channel – in this case a default RDP channel called MS_T210 – and sending specially crafted data to it. The exploit runs code on Windows XP, they said, but warned that it would probably crash Windows 7 or Server 2008 machines. By sending a specially crafted packet an attacker is able to set the value for the Channel ID to something the RDP service isn’t expecting, this causes a memory corruption bug that will create the conditions for Remote Code Execution to occur. Should the attacker choose to follow up with packets designed to take advantage of this flaw remote code execution can be achieved with System user privileges. There are no payloads. This is just a PoC. HOWEVER it is easily ported to an exploit since you can easily add payloads to this.

boobsnail

BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.

botnets

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

boxxy

boxxy puts bad Linux applications in a box with only their files.

browser-custom-dns

Inject / hook a DLL into web browser's GetAddrInfoW() to use custom DNS

browserselector

Small utility to launch a different browser depending on the domain of the url being launched.

btlejuice

BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework

caldera

The CALDERA automated adversary emulation system

callbackhell

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

capa

The FLARE team's open-source tool to identify capabilities in executable files.

capcom-rootkit

Capcom Rootkit POC

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

certstealer

A .NET tool for exporting and importing certificates without touching disk.

chat-app

Multithreading TCP server and client communicating over TCP/IP - Windows Forms Application.

chirp.io

Chirp.io Encoder/Decoder in Python

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

clearcut

Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review

jymcheong Goto Github PK

Jym Cheong's Projects

Recommend Projects

Recommend Topics

Recommend Org