khr0x40sh Goto Github PK

aggressor-scripts

Aggressor scripts I've made for Cobalt Strike

amsibypasshookmanagedapi

A new AMSI Bypass technique using .NET ALI Call Hooking.

amsiscanbufferbypass

asmhalosgate

x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks

aspjinjaobfuscator

Heavily obfuscated ASP web shell generation tool.

badkarma

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

corporate_masks

8-14 character Hashcat masks based on analysis of 1.5 million NTLM hashes cracked while pentesting

credbandit

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

csexec

An implementation of PSExec in C#

cve-2018-4878

cve-2023-20178

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

defendercheck

Identifies the bytes that Microsoft Defender flags on.

derbycon9ctf

Code snippets for DerbyCon 9.0 CTF

divert

WinDivert: Windows Packet Divert

duedlligence

dumpsterfire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

edrsandblast

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

embedps

evilnetconnectionwmiprovider

galvatron

Powershell fork of Monohard by Carlos Ganoza P. This botnet/backdoor was designed to egress over unecrypted web using very little, but effective obfuscation. Egress over ICMP and DNS are planned as features. Lastly, the server code is designed to setup the C2 on a LAMP-esque server. The default creds are admin/admin.

godpotato

grading-1

grading-2

hack.vent2016

Hackvent 2016 files/helper files [Write-up at khr0x40sh.wordpress.com]

hackvent.2017

hackvent2017 files and helper files from write-up at https://khr0x40sh.wordpress.com/

hob0rules

Password cracking rules for Hashcat based on statistics and industry patterns

icmpsh

Simple reverse ICMP shell