trickster0 Goto Github PK

alanframework

A C2 post-exploitation framework

angryorchard

A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.

angryorchard-original

Original proof of concept I submitted to brokers demonstrating the vulnerability in hopes of getting rid of it.

asus-dos

Denial of Service for Asus Precision TouchPad 11.0.0.25 - DoS/Privesc

azure-hunting

Collection of hunting resources for Microsoft Azure

b1-keylogger

bfs-ekoparty-2019-challenge

Exploit for the "BFS Ekoparty 2019 Exploitation Challenge"

blacklotus

BlackLotus UEFI Windows Bootkit

blindbrowse

Android BlindBrowser : Real Time Navigation on Android devices with no display.

bootdoor

Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

brave_browser_1day_poc

This is a crash for Brave Browser I found in New Years Eve, used to be a 0day when I found it

clr-thing

rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.

clroxide

A rust library that allows you to host the CLR and execute dotnet binaries.

coffee

A COFF loader made in Rust

collare

Multi-tool reverse engineering collaboration solution.

collareserver

com-research

Research into COM

container_sec_workstation

creadmemory

Read Memory without ReadProcessMemory for Current Process

darkpulsar

EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!

detectwindowscopyonwriteforapi

Enumerate various traits from Windows processes as an aid to threat hunting

doublepulsar-rdp

Another unfinished doublepulsar RDP variant from years ago. Demonstrates hooking McsDispatch, never wrote the hook itself

edr_detector

EDR Detector that can find what kind of endpoint solution is being used according to drivers in the system.

elastic_panel_autoinstall

Spawn Up quickly Elastic EDR Panel

enyx

Enyx SNMP IPv6 Enumeration Tool

ghost

A sample client/server architecture

graphspy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

infinityhook

Hook system calls, context switches, page faults and more.

kvass

内网穿透工具，实现了 frp 的部分功能