rnmx Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

alcatraz

x64 binary obfuscator

algorithmcourse

一份算法教程和leetcode等平台的脑瘫教程

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

blackhat-python3

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries.

certipy

Tool for Active Directory Certificate Services enumeration and abuse

chromefuzzer

fuzz

cmstplua-uac-bypass

Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.

coingame

Congrats it was the first step ! Welcome on my Github, this is my new game but I haven't pushed the modifications ...

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

cronos

PoC for a new sleep obfuscation technique leveraging waitable timers to evade memory scanners.

cve-2020-0683

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

directinjectorpoc

Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.

dvs

D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects

ekko

Sleep Obfuscation

executeassembly_mailslot

flashbang

Project "Flashbang" - An open-source Flash-security helper

foliage

A proof of concept I developed to improve Gargoyle back in 2018 to achieve true memory obfuscation from position independent code

fuzzer-windows

Unnamed repository; edit this file 'description' to name the repository.

gargoyle

A memory scanning evasion technique

ghhv6

Gray Hat Hacking v6

hackertools_icmluautil_uac

使用MFC编写的病毒技术合集

hacksysextremevulnerabledriver

HackSys Extreme Vulnerable Windows Driver

hadesldr

Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2

hostingclr

Executing a .NET Assembly from C++ in Memory (CLR Hosting)

hwj

Tools, Code and Notes for Hacking with Jan video series

hwsyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.