backuphouse Goto Github PK

dotnet-gargoyle

A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique

dotnetexp

DotNet Explorer

dotnetinjections

Loading Assemblies Into Processes, the All Natural Organic way

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

dumpnparse

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

dynamicwrapperdotnet

Dynamically Loads Assembly and Calls Methods from JScript

dynobj

Dynamic COFF object loader

eaglemonitorrat

Remote Access Tool Written In C#

easyanticheat-src

efiguard

Disable PatchGuard and DSE at boot time

elfloader

encryptor

Windows shellcode encoding and encrypting tool

enumerateidentityrights

Wraps LsaEnumerateAccountRights and returns the specified identity's assigned rights.

etw-syscall

https://key08.com/index.php/2021/10/19/1375.html

eventcleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

eventvieweruac_bof

Beacon Object File implementation of Event Viewer deserialization UAC bypass

expparser

一个简单的解析数学表达式并计算结果的程序

fake-everything

Everything的原理猜想与实现

falconeye

filetest

Source code for File Test - Interactive File System Test Tool

finitestatemachine

Finite State Machine (pure version)

firewall-rule

Add/Remove Firewall rule sample, Windows

foks-trot

minifilter双缓冲透明加解密过滤驱动

foliage

Experiment on reproducing Obfuscate & Sleep

formatpe

A bunch of parsers for PE and PDB formats in C++

freerdp-smartcardlogon

FreeRDP is a free remote desktop protocol client

frostbyte

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

fud_x64_loader

Utilizing Alternative Shellcode Execution Via Callbacks

funloader

shellcode loader for evasion

gargoyle

A memory scanning evasion technique