backuphouse Goto Github PK

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

callmewin32kdriver

Load your driver like win32k.sys

callobfuscator

Obfuscate specific windows apis with different apis

chlonium

Chromium Cookie import / export tool

chntpw

Chntpw fork aimed at automatic interaction

chrome-passwords

Recover locally saved passwords on Google Chrome.

chromepasswords

code-injection

Code Injection + Hooking sample

codecave

A bunch of scripts and code i wrote.

comon

A WinDbg extension to trace COM interactions

comrunner

A simple COM server which provides a component to run shellcode

contextmenuhijack

Execute a payload at each right click on a file/folder in the explorer menu for persistence

covm

A lightweight x86/x64 VM

cowinjecter

滥用cow机制进行全局注入

cpp-obfuscator

C++ implementation of compile time obfuscator

createremotethread

From 32-bit process to 64-bit process

cred

Windows Credentials Import & Export

crossinject

x86/x64 dll injector

cs-remote-ops-bof

cve-2021-40449

LPE exploit for a UAF in Windows (CVE-2021-40449).

cve-2022-24483

POC For CVE-2022-24483

cve-2022-26809

CVE-2022-26809 RCE Exploit Remote Code Execution

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

dcrat-legal

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

deepsleep

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

delete-self-poc

A way to delete a locked file, or current running executable, on disk.

detect-hooks

Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR

detecthiddenthreads

Proper way to catch hidden threads

detectwindowscopyonwriteforapi

Enumerate various traits from Windows processes as an aid to threat hunting