pparaujo Goto Github PK

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

aquarmoury

My musings in C and offensive tooling

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

cfb

Canadian Furious Beaver is a tool for monitoring IRP handler in Windows drivers, and facilitating the process of analyzing, replaying and fuzzing Windows drivers for vulnerabilities

cobaltstrikereflectiveloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

codeql-uboot

controller

cryptopp

free C++ class library of cryptographic schemes

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

forkplayground

An implementation and proof-of-concept of Process Forking.

fuzzing-corpus

My fuzzing corpus

go-hunt-weak-pes

grok-1

Grok open release

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

kaynstrike

UDRL for CS

leakedhandlesfinder

Leaked Windows processes handles identification tool

malproxy

Proxy system calls over an RPC channel

memory-module-loader

An implementation of a Windows loader that can load dynamic-linked libraries (DLLs) directly from memory

micrograd

A tiny scalar-valued autograd engine and a neural net library on top of it with PyTorch-like API

microsoftwontfixlist

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

nimpackt-v1

Nim-based assembly packer and shellcode loader for opsec & profit

nomsbuild

MSBuild without MSbuild.exe

ntcreateuserprocess

Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

osep

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

pentest-tools